nerdexam
Microsoft

GH-500 · Question #78

Which CodeQL query suite provides queries of lower severity than the default query suite?

The correct answer is B. security-extended. The security-extended CodeQL query suite includes all queries from the default suite plus additional queries that target lower-severity and lower-confidence findings. The default suite focuses on high-severity, high-confidence results to minimize noise. Choosing…

Configure and use Code Scanning with CodeQL

Question

Which CodeQL query suite provides queries of lower severity than the default query suite?

Options

  • Agithub/codeql/cpp/ql/src@main
  • Bsecurity-extended
  • Cgithub/codeql-go/ql/src@main

How the community answered

(55 responses)
  • A
    4% (2)
  • B
    95% (52)
  • C
    2% (1)

Explanation

The security-extended CodeQL query suite includes all queries from the default suite plus additional queries that target lower-severity and lower-confidence findings. The default suite focuses on high-severity, high-confidence results to minimize noise. Choosing security-extended broadens coverage at the cost of potentially more false positives. Options A and C (github/codeql/cpp/ql/src@main and github/codeql-go/ql/src@main) are CodeQL pack source paths referencing language-specific query libraries, not named query suites.

Topics

#CodeQL#Query Suites#Code Scanning#Severity Levels

Community Discussion

No community discussion yet for this question.

Full GH-500 Practice