What benefit does GitHub Advanced Security provide?

Question

Options

• Ahelps organization administrators analyze and configure permissions to the least privilege required
• Bhelps developers improve and maintain the security and quality of code
• Chelps enterprise administrators improve and maintain network security for their GitHub Enterprise
• Dhelps organization administrators manage security tokens

• A
  2% (1)
• B
  90% (44)
• C
  6% (3)
• D
  2% (1)

Explanation

GitHub Advanced Security (GHAS) is a developer-focused security toolkit that integrates directly into the development workflow, offering features like code scanning (via CodeQL), secret scanning, and dependency review - all designed to help developers find and fix vulnerabilities in their code before they reach production, making B correct.

Option A describes a role/permissions management tool (closer to GitHub Enterprise's access controls or tools like IAM), not GHAS. Option C conflates GHAS with network-level security, which is an infrastructure concern entirely outside GHAS's scope. Option D describes token management, which relates to authentication governance - again, not a GHAS function.

Memory tip: Think "Advanced Security = Actual Source code" - GHAS lives in the code, not in the network, permissions, or tokens. If the answer is about what developers touch daily, it's GHAS.

No community discussion yet for this question.