Online Access Free GitHub-Advanced-Security Exam Questions

Assuming that notification and alert recipients are not customized, what does GitHub do when it identifies a vulnerable dependency in a repository where Dependabot alerts are enabled? (Each answer presents part of the solution. Choose two.)

• A.It notifies the repository administrators about the new alert.
• B.It consults with a security service and conducts a thorough vulnerability review.
• C.It generates Dependabot alerts by default for all private repositories.
• D.It generates a Dependabot alert and displays it on the Security tab for the repository.

Where can you find a deleted line of code that contained a secret value?

• A.Insights
• B.Issues
• C.Commits
• D.Dependency graph

Which key is required in the update settings of the Dependabot configuration file?

• A.rebase-strategy
• B.package-ecosystem
• C.commit-message
• D.assignees

What YAML syntax do you use to exclude certain files from secret scanning?

• A.branches-ignore:
• B.secret scanning.yml
• C.decrypt_secret.sh
• D.paths-ignore:

What do you need to do before you can define a custom pattern for a repository?

• A.Provide match requirements for the secret format.Stack Overflow
• B.Enable secret scanning on the repository.
• C.Add a secret scanning custom pattern.
• D.Provide a regular expression for the format of your secret pattern.