Question 1

You are a maintainer of a repository and Dependabot notifies you of a vulnerability. Where could the vulnerability have been disclosed? (Each answer presents part of the solution. Choose two.)

Options :

A : In the National Vulnerability Database

B : In the dependency graph

C : In security advisories reported on GitHub

D : In manifest and lock files

Answer: A,C

Question 2

What is a fundamental aspect of GitHub Advanced Security's approach to code security?

Options :

A : Prioritizing speed over security

B : Focusing only on post-deployment security

C : Integrating security at every stage of development

D : Delegating all security responsibilities to automated tools

Answer: C

Question 3

How can GitHub's code scanning be used effectively in a CI/CD pipeline?

Options :

A : By running scans post-deployment

B : By integrating scans into the build process

C : By scanning only at the end of each sprint

D : By triggering scans manually

Answer: B

Question 4

Which approach is recommended for scrubbing sensitive data from a GitHub repository?

Options :

A : Employing the 'git filter-branch' command

B : Using 'git rebase'

C : Manually deleting files

D : Archiving the repository

Answer: A

Question 5

When configuring secret scanning, what should be considered?

Options :

A : The main programming language used

B : The number of branches in the repository

C : Types of secrets to be scanned for

D : The frequency of code updates

Answer: C

Free GitHub-Advanced-Security Mock Exam – Practice Online Confidently

Buying Options: