Question 1

Which of the following statements most accurately describes push protection for secret scanning custom patterns?

Options :

A : Push protection must be enabled for all, or none, of a repository's custom patterns.

B : Push protection is an opt-in experience for each custom pattern.

C : Push protection is not available for custom patterns.

D : Push protection is enabled by default for new custom patterns.

Answer: B

Question 2

What type of security issues can CodeQL identify?

Options :

A : Syntax errors

B : SQL injection

C : Cross-site scripting

D : Memory leaks

E : Buffer overflows

F : Data race conditions

Answer: B,C,E

Question 3

How should a GitHub administrator respond to a reported security vulnerability?

Options :

A : Immediately publicize the vulnerability

B : Review and validate the report

C : Ignore the report if it seems minor

D : Delete the affected code segments

Answer: B

Question 4

What challenge might arise when configuring code scanning for a large and complex codebase?

Options :

A : All of the above

B : Difficulty in integrating with the existing build system

C : A high number of false positives

D : Longer time to complete scans

Answer: A

Question 5

What type of security issues is CodeQL most effective at identifying?

Options :

A : Complex security vulnerabilities

B : Performance bottlenecks

C : Basic syntax errors

D : User interface flaws

Answer: A

Free GitHub-Advanced-Security Mock Exam – Practice Online Confidently