GH-500 試験問題を無料オンラインアクセス

Which of the following formats are used to describe a Dependabot alert? Each answer presents a complete solution. (Choose two.)

• A.Common Vulnerabilities and Exposures (CVE)
• B.Vulnerability Exploitability eXchange (VEX)
• C.Exploit Prediction Scoring System (EPSS)
• D.Common Weakness Enumeration (CWE)

What is required to trigger code scanning on a specified branch?

• A.The workflow file must exist in that branch.
• B.Secret scanning must be enabled on the repository.
• C.Developers must actively maintain the repository.
• D.The repository must be private.

Why should you dismiss a code scanning alert?

• A.to prevent developers from introducing new problems
• B.if it includes an error in code that is used only for testing
• C.if you fix the code that triggered the alert
• D.if there is a production error in your code

What does code scanning do?

• A.It contacts maintainers to ask them to create security advisories if a vulnerability is found.
• B.It analyzes a GitHub repository to find security vulnerabilities.
• C.It prevents code pushes with vulnerabilities as a pre-receive hook.
• D.It scans your entire Git history on branches present in your GitHub repository for any secrets.

As a developer with write access, you navigate to a code scanning alert in your repository. When will GitHub close this alert?

• A.after you fix the code by committing within the pull request
• B.after you find the code and click the alert within the pull request
• C.when you use data-flow analysis to find potential security issues in code
• D.after you triage the pull request containing the alert