nerdexam
MicrosoftMicrosoft

GH-500 · Question #11

GH-500 Question #11: Real Exam Question with Answer & Explanation

The correct answer is D: private keys. {"question_number": 8, "correct_answer": "D", "explanation": "Without custom patterns, GitHub's default secret scanning detects structured secrets such as private keys (e.g., RSA private keys, PEM files), API tokens, OAuth credentials, and service-specific secrets from supported

Secret Scanning

Question

Assuming that no custom patterns are configured, what type of secret is detected by secret scanning?

Options

  • Ausernames
  • Bsealed boxes
  • CPersonal Identifiable Information (PII)
  • Dprivate keys

Explanation

{"question_number": 8, "correct_answer": "D", "explanation": "Without custom patterns, GitHub's default secret scanning detects structured secrets such as private keys (e.g., RSA private keys, PEM files), API tokens, OAuth credentials, and service-specific secrets from supported partners. It does not detect usernames (A), which are not secrets in the cryptographic sense. 'Sealed boxes' (B) is not a secret scanning category. PII (C) like names or email addresses is outside the scope of default secret scanning, which targets credentials and cryptographic material.", "generated_by": "claude-sonnet", "llm_judge_score": 3}

Topics

#Secret scanning#Default patterns#Detected secrets#GitHub Advanced Security

Community Discussion

No community discussion yet for this question.

Full GH-500 PracticeBrowse All GH-500 Questions