nerdexam
Microsoft

GH-500 · Question #11

Assuming that no custom patterns are configured, what type of secret is detected by secret scanning?

The correct answer is D. private keys. Without custom patterns, GitHub's default secret scanning detects structured secrets such as private keys (e.g., RSA private keys, PEM files), API tokens, OAuth credentials, and service-specific secrets from supported partners. It does not detect usernames (A), which are not…

Secret Scanning

Question

Assuming that no custom patterns are configured, what type of secret is detected by secret scanning?

Options

  • Ausernames
  • Bsealed boxes
  • CPersonal Identifiable Information (PII)
  • Dprivate keys

How the community answered

(32 responses)
  • A
    3% (1)
  • C
    3% (1)
  • D
    94% (30)

Explanation

Without custom patterns, GitHub's default secret scanning detects structured secrets such as private keys (e.g., RSA private keys, PEM files), API tokens, OAuth credentials, and service-specific secrets from supported partners. It does not detect usernames (A), which are not secrets in the cryptographic sense. 'Sealed boxes' (B) is not a secret scanning category. PII (C) like names or email addresses is outside the scope of default secret scanning, which targets credentials and cryptographic material.

Topics

#Secret scanning#Default patterns#Detected secrets#GitHub Advanced Security

Community Discussion

No community discussion yet for this question.

Full GH-500 Practice