Online Access Free GH-500 Exam Questions

Secret scanning will ignore a secret_scanning.yml file that

• A.is 1 MB or larger
• B.has 1,000 or more directories
• C.contains 1,000 or more entries.
• D.is 100 KB or larger.

Where can you find the vulnerable dependencies that GitHub detected in your repository?

• A.in security advisories
• B.in code scanning alerts
• C.in Dependabot alerts
• D.in secret scanning alerts

If default code security settings have not been changed at the repository, organization, or enterprise level, which repositories receive Dependabot alerts?

• A.repositories owned by an enterprise account
• B.repositories owned by an organization
• C.private repositories
• D.none

How does secret scanning availability differ for public and private repositories on GitHub?

• A.Secret scanning is not available for either public or private repositories.
• B.Secret scanning is only available for public repositories.
• C.Secret scanning is available for both public and private repositories, but the configuration options may differ.
• D.Secret scanning is only available for private repositories.

Which of the following workflow events would trigger a dependency review? (Each answer presents a complete solution. Choose two.)

• A.trigger
• B.pull_request
• C.workflow_dispatch
• D.commit