Question 1

You are a maintainer of a repository and Dependabot notifies you of a vulnerability. Where could the vulnerability have been disclosed? (Each answer presents part of the solution. Choose two.)

Options :

A : In the National Vulnerability Database

B : In the dependency graph

C : In security advisories reported on GitHub

D : In manifest and lock files

Answer: A,C

Question 2

What is a fundamental aspect of GitHub Advanced Security's approach to code security?

Options :

A : Prioritizing speed over security

B : Focusing only on post-deployment security

C : Integrating security at every stage of development

D : Delegating all security responsibilities to automated tools

Answer: C

Question 3

Which aspect of GitHub Advanced Security can be managed by an administrator?

Options :

A : Enabling/disabling the features

B : Scheduling project milestones

C : Automating code reviews

D : Customizing the user interface

Answer: A

Question 4

What is the purpose of a SECURITY.md file in a GitHub repository?

Options :

A : To provide a history of security updates

B : To outline the security policies and reporting procedures

C : To automate security scanning

D : To list the security roles and responsibilities

Answer: B

Question 5

When should sensitive data policies be reviewed and updated in GitHub?

Options :

A : Annually

B : When new team members join

C : When new features are added to GitHub

D : When new features are added to GitHub

E : After every major project milestone

F : If there are changes in compliance laws

Answer: D,E,F