nerdexam
Microsoft

GH-500 · Question #98

Which of the following statements most accurately describes push protection for secret scanning custom patterns?

The correct answer is B. Push protection must be enabled for all, or none, of a repository's custom patterns. Push protection for custom patterns is not a per-pattern toggle. It operates at the repository or organization level, meaning that when push protection is enabled, it applies uniformly to all custom patterns defined for that scope. You cannot selectively enable push protection…

Configure and use secret scanning

Question

Which of the following statements most accurately describes push protection for secret scanning custom patterns?

Options

  • APush protection is enabled by default for new custom patterns.
  • BPush protection must be enabled for all, or none, of a repository's custom patterns.
  • CPush protection is not available for custom patterns.
  • DPush protection is an opt-in experience for each custom pattern.

How the community answered

(20 responses)
  • B
    90% (18)
  • C
    5% (1)
  • D
    5% (1)

Explanation

Push protection for custom patterns is not a per-pattern toggle. It operates at the repository or organization level, meaning that when push protection is enabled, it applies uniformly to all custom patterns defined for that scope. You cannot selectively enable push protection for some custom patterns while leaving others without it. This all-or-nothing behavior ensures consistent enforcement rather than a patchwork of protections that could create gaps.

Topics

#Secret scanning#Push protection#Custom patterns#Configuration

Community Discussion

No community discussion yet for this question.

Full GH-500 Practice