Question 1

How can GitHub's code scanning be used effectively in a CI/CD pipeline?

Options :

A : By running scans post-deployment

B : By integrating scans into the build process

C : By scanning only at the end of each sprint

D : By triggering scans manually

Answer: B

Question 2

What is the core function of QL in GitHub CodeQL?

Options :

A : Handling repository settings

B : Managing database queries

C : Automating code deployment

D : Conducting semantic code analysis

Answer: D

Question 3

What is a fundamental aspect of GitHub Advanced Security's approach to code security?

Options :

A : Prioritizing speed over security

B : Focusing only on post-deployment security

C : Integrating security at every stage of development

D : Delegating all security responsibilities to automated tools

Answer: C

Question 4

Which GitHub feature works alongside code scanning to enhance security?

Options :

A : GitHub Actions

B : Dependabot

C : GitHub Issues

D : GitHub Pages

Answer: B

Question 5

You are a maintainer of a repository and Dependabot notifies you of a vulnerability. Where could the vulnerability have been disclosed? (Each answer presents part of the solution. Choose two.)

Options :

A : In the National Vulnerability Database

B : In the dependency graph

C : In security advisories reported on GitHub

D : In manifest and lock files

Answer: A,C

Higher Test Marks with Free Online GitHub-Advanced-Security Exam Practice

Buying Options: