Free Microsoft GH-500 Exam Dumps Questions & Answers

What is the best method to ensure all new code is scanned for vulnerabilities?

• A.  Configure code owners.
• B.  Add the extended suite.
• C.  Configure code scanning.
• D.  Set up a security policy.

What are the default settings for Dependabot alerts in public and private repositories on GitHub?

• A.  Dependabot alerts are enabled by default for public repositories and disabled by default for private repositories.
• B.  Dependabot alerts are disabled by default for public repositories and enabled by default for private repositories.
• C.  Dependabot alerts are enabled by default for both public and private repositories.
• D.  Dependabot alerts are disabled by default for both public and private repositories.

You are a maintainer of a repository and Dependabot notifies you of a vulnerability. Where could the vulnerability have been disclosed? Each answer presents part of the solution. (Choose two.)

• A.  in manifest and lock files
• B.  in security advisories reported on GitHub
• C.  in the dependency graph
• D.  in the National Vulnerability Database

Secret scanning will scan:

• A.  the GitHub repository.
• B.  a continuous integration system.
• C.  any Git repository.
• D.  external services.

What is required to trigger code scanning on a specified branch?

• A.  Secret scanning must be enabled on the repository.
• B.  The workflow file must exist in that branch.
• C.  Developers must actively maintain the repository.
• D.  The repository must be private.