Prepare Smarter for the GitHub-Advanced-Security Exam
Build your exam confidence with flexible preparation resources designed around the latest GitHub-Advanced-Security exam objectives. Practice at your own pace using PDF questions, online exam simulations, or desktop practice software.
Which security feature shows a vulnerable dependency in a pull request?
Correct Answer: B
Dependency review runs as part of a pull request and shows which dependencies are being added, removed, or changed — and highlights vulnerabilities associated with any added packages.
It works in real-time and is specifically designed for use during pull request workflows.
The dependency graph is an overview, Dependabot alerts notify post-merge, and the Security tab shows the aggregated alert list.
Which of the following options would close a Dependabot alert?
Correct Answer: A
A Dependabot alert is only marked as resolved when the related vulnerability is no longer present in your code — specifically after you merge a pull request that updates the vulnerable dependency.
Simply viewing alerts or graphs does not affect their status. Ignoring the alert by leaving the repo unchanged keeps the vulnerability active and unresolved.
Where in the repository can you give additional users access to secret scanning alerts?
Correct Answer: B
To grant specific users access to view and manage secret scanning alerts , you do this via the Settings tab of the repository. From there, under the "Code security and analysis" section, you can add individuals or teams with roles such as security manager .
The Security tab only displays alerts; access control is handled in Settings.
A repository's dependency graph includes:
Correct Answer: A
The dependency graph in a repository is built by parsing manifest and lock files (like package.json, pom.xml, requirements.txt). It helps GitHub detect dependencies and cross-reference them with known vulnerability databases for alerting.
It is specific to each repository and does not show org-wide or cross-repo summaries.
Secret scanning will scan:
Correct Answer: C
Secret scanning is a feature provided by GitHub that scans the contents of your GitHub repositories for known types of secrets, such as API keys and tokens. It operates within the GitHub environment and does not scan external systems, services, or repositories outside of GitHub. Its primary function is to prevent the accidental exposure of sensitive information within your GitHub-hosted code.