nerdexam
Microsoft

GH-500 · Question #6

Which of the following benefits do code scanning, secret scanning, and dependency review provide?

The correct answer is C. Search for potential security vulnerabilities, detect secrets, and show the full impact of changes to. Code scanning, secret scanning, and dependency review collectively address vulnerabilities in code logic, exposed secrets, and risky dependency changes within a single integrated security workflow.

Describe the GHAS security features and functionality

Question

Which of the following benefits do code scanning, secret scanning, and dependency review provide?

Options

  • AAutomatically raise pull requests, which reduces your exposure to older versions of
  • BView alerts about dependencies that are known to contain security vulnerabilities.
  • CSearch for potential security vulnerabilities, detect secrets, and show the full impact of changes to
  • DConfidentially report security vulnerabilities and privately discuss and fix security vulnerabilities in

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    88% (30)
  • D
    3% (1)

Why each option

Code scanning, secret scanning, and dependency review collectively address vulnerabilities in code logic, exposed secrets, and risky dependency changes within a single integrated security workflow.

AAutomatically raise pull requests, which reduces your exposure to older versions of

Automatically raising pull requests to update outdated dependencies is the specific function of Dependabot version updates, not the combined benefit of these three features.

BView alerts about dependencies that are known to contain security vulnerabilities.

Viewing alerts about dependencies with known vulnerabilities is the specific function of Dependabot alerts, not the collective benefit of code scanning, secret scanning, and dependency review.

CSearch for potential security vulnerabilities, detect secrets, and show the full impact of changes toCorrect

Code scanning uses CodeQL and other tools to find security vulnerabilities in source code, secret scanning detects exposed credentials and tokens, and dependency review surfaces the security impact of dependency changes directly in pull requests - together covering code, secrets, and supply chain risks.

DConfidentially report security vulnerabilities and privately discuss and fix security vulnerabilities in

Confidentially reporting and privately discussing security vulnerabilities describes GitHub's private vulnerability reporting feature, which is separate from code scanning, secret scanning, and dependency review.

Concept tested: Combined benefits of GHAS code, secret, and dependency security features

Source: https://docs.github.com/en/code-security/getting-started/github-security-features

Topics

#Code Scanning#Secret Scanning#Dependency Review#GHAS features

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GH-500 Practice