Question 1

Which statement is true about configuring secret scanning in GitHub?

Options :

A : It requires installation of external software

B : It-s configured at the repository level

C : It-s automatically enabled for all new repositories

D : It-s available for all repositories regardless of the plan

Answer: B

Question 2

How should a GitHub administrator approach incident reporting?

Options :

A : Report only major incidents

B : Focus on external threats only

C : Delegate reporting to individual contributors

D : Document all incidents systematically

Answer: D

Question 3

Which of the following statements most accurately describes push protection for secret scanning custom patterns?

Options :

A : Push protection must be enabled for all, or none, of a repository's custom patterns.

B : Push protection is an opt-in experience for each custom pattern.

C : Push protection is not available for custom patterns.

D : Push protection is enabled by default for new custom patterns.

Answer: B

Question 4

How can GitHub's code scanning be used effectively in a CI/CD pipeline?

Options :

A : By running scans post-deployment

B : By integrating scans into the build process

C : By scanning only at the end of each sprint

D : By triggering scans manually

Answer: B

Question 5

How does secret scanning in GitHub enhance overall project security?

Options :

A : By automating code reviews

B : By enforcing coding standards

C : By managing team access controls

D : By detecting and alerting on exposed secrets

Answer: D

Free GH-500 Mock Exam – Practice Online Confidently