nerdexam
Microsoft

GH-500 · Question #90

What are the default settings for Dependabot alerts in public and private repositories on GitHub?

The correct answer is A. Dependabot alerts are enabled by default for public repositories and disabled by default for. Dependabot alerts are enabled by default for public repositories but must be manually enabled by an administrator for private repositories.

Implement and manage Dependabot

Question

What are the default settings for Dependabot alerts in public and private repositories on GitHub?

Options

  • ADependabot alerts are enabled by default for public repositories and disabled by default for
  • BDependabot alerts are disabled by default for both public and private repositories.
  • CDependabot alerts are enabled by default for both public and private repositories.
  • DDependabot alerts are disabled by default for public repositories and enabled by default for

How the community answered

(50 responses)
  • A
    88% (44)
  • B
    6% (3)
  • C
    2% (1)
  • D
    4% (2)

Why each option

Dependabot alerts are enabled by default for public repositories but must be manually enabled by an administrator for private repositories.

ADependabot alerts are enabled by default for public repositories and disabled by default forCorrect

GitHub automatically enables Dependabot alerts on all public repositories to support the open-source community's security posture, while private repositories require an organization or repository administrator to explicitly enable the feature, reflecting the different access and notification considerations for private code.

BDependabot alerts are disabled by default for both public and private repositories.

Dependabot alerts are not disabled by default for both repository types; public repositories have them enabled automatically without any administrator action required.

CDependabot alerts are enabled by default for both public and private repositories.

Dependabot alerts are not enabled by default for both repository types; private repositories require manual enablement by an admin before alerts are generated.

DDependabot alerts are disabled by default for public repositories and enabled by default for

This answer reverses the actual defaults; it is public repositories - not private - that have Dependabot alerts enabled by default on GitHub.

Concept tested: Default Dependabot alert enablement for public versus private repositories

Source: https://docs.github.com/en/code-security/dependabot/dependabot-alerts/configuring-dependabot-alerts

Topics

#Dependabot alerts#Default settings#Public vs Private repos

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GH-500 Practice