Question 1

How should a GitHub administrator approach incident reporting?

Options :

A : Report only major incidents

B : Focus on external threats only

C : Delegate reporting to individual contributors

D : Document all incidents systematically

Answer: D

Question 2

Which of the following are steps in running a CodeQL query?

Options :

A : Compiling the code

B : Creating a CodeQL database

C : Executing the query

D : Reviewing query results

E : Pushing code to the repository

F : Merging pull requestsRunning a CodeQL query involves creating a CodeQL database, executing the query, and then reviewing the query results.

Answer: B,C,D

Question 3

What is the purpose of a SECURITY.md file in a GitHub repository?

Options :

A : To provide a history of security updates

B : To outline the security policies and reporting procedures

C : To automate security scanning

D : To list the security roles and responsibilities

Answer: B

Question 4

What types of vulnerabilities can CodeQL identify?

Options :

A : Race conditions

B : Syntax errors

C : Cross-site scripting (XSS)

D : SQL injections

E : Memory leaks

F : Buffer overflows

Answer: C,D,F

Question 5

Which are key components of a comprehensive security policy on GitHub?

Options :

A : Code scanning guidelines

B : Bug bounty programs

C : Vulnerability reporting instructions

D : Automated build settings

E : Dependency update policies

F : Code review requirements

Answer: A,C,E

Higher Test Marks with Free Online GH-500 Exam Practice