最新的Microsoft GitHub Advanced Security - GH-500免費考試真題
Which of the following is the best way to prevent developers from adding secrets to the repository?
正確答案: B
說明:(僅 Fast2test 成員可見)
Which of the following options are code scanning application programming interface (API) endpoints? (Each answer presents part of the solution. Choose two.)
正確答案: A,C
說明:(僅 Fast2test 成員可見)
When using CodeQL, how does extraction for compiled languages work?
正確答案: D
說明:(僅 Fast2test 成員可見)
Assuming dependabot.yml does not exist in the repository, how many reviewers would Dependabot automatically assign to an open pull request?
正確答案: D
說明:(僅 Fast2test 成員可見)
What does code scanning do?
正確答案: A
說明:(僅 Fast2test 成員可見)
After investigating a code scanning alert related to injection, you determine that the input is properly sanitized using custom logic. What should be your next step?
正確答案: C
說明:(僅 Fast2test 成員可見)
What YAML syntax do you use to exclude certain files from secret scanning?
正確答案: B
說明:(僅 Fast2test 成員可見)