GH-500 Practice Online

Question 1

What is an advantage of secret scanning for public repositories on GitHub?

A : It protects against accidental exposure of secrets

B : It increases repository visibility

C : It prevents unauthorized code changes

D : It speeds up the code deployment process

Answer: A

Question 2

When customizing GitHub Advanced Security alerts, what can be configured?

A : Alert frequency

B : Types of alerts to receive

C : Notification methods

D : Code scanning schedules

E : Collaborators to notify

F : Repository access permissions

Answer: A,B,C

Question 3

How can GitHub's code scanning be used effectively in a CI/CD pipeline?

A : By running scans post-deployment

B : By integrating scans into the build process

C : By scanning only at the end of each sprint

D : By triggering scans manually

Answer: B

Question 4

What is an effective method for managing access to sensitive data in a GitHub repository?

A : Allow access to all team members

B : Grant access based on role and necessity

C : Use a public repository for transparency

D : Restrict access using branch protection rules

Answer: B

Question 5

What is the core function of QL in GitHub CodeQL?

A : Handling repository settings

B : Managing database queries

C : Automating code deployment

D : Conducting semantic code analysis

Answer: D

Name:	GitHub Advanced Security
Exam Code:	GH-500
Certification:	GitHub Certified Administrator
Vendor:	Microsoft
Total Questions:	300
Last Updated:	Oct 22, 2026