Question 1

What types of vulnerabilities can CodeQL identify?

Options :

A : Race conditions

B : Syntax errors

C : Cross-site scripting (XSS)

D : SQL injections

E : Memory leaks

F : Buffer overflows

Answer: C,D,F

Question 2

Which are key components of a comprehensive security policy on GitHub?

Options :

A : Code scanning guidelines

B : Bug bounty programs

C : Vulnerability reporting instructions

D : Automated build settings

E : Dependency update policies

F : Code review requirements

Answer: A,C,E

Question 3

What challenge might arise when configuring code scanning for a large and complex codebase?

Options :

A : All of the above

B : Difficulty in integrating with the existing build system

C : A high number of false positives

D : Longer time to complete scans

Answer: A

Question 4

Which statement is true about configuring secret scanning in GitHub?

Options :

A : It requires installation of external software

B : It-s configured at the repository level

C : It-s automatically enabled for all new repositories

D : It-s available for all repositories regardless of the plan

Answer: B

Question 5

What is the purpose of a SECURITY.md file in a GitHub repository?

Options :

A : To provide a history of security updates

B : To outline the security policies and reporting procedures

C : To automate security scanning

D : To list the security roles and responsibilities

Answer: B