About this exam
GitHub-Advanced-Security is the GitHub exam GitHub Advanced Security Certification.
Paid practice material for this exam is not available yet, but you can try its free sample questions.
- Exam code
- GitHub-Advanced-Security
- Vendor
- GitHub
- Practice questions
- Not available yet
- Free sample questions
- 5
- Question bank last updated
- Not available yet
Try 2 sample questions
Taken from the free sample set for GitHub-Advanced-Security.
Question 1
Which security feature shows a vulnerable dependency in a pull request?
- AOption A:
- BOption B:
- COption C:
- DOption D:
The repository's Security tab
Show answer and explanation
Correct answer: B
Dependency review runs as part of a pull request and shows which dependencies are being added, removed, or changed — and highlights vulnerabilities associated with any added packages.
It works in real-time and is specifically designed for use during pull request workflows.
The dependency graph is an overview, Dependabot alerts notify post-merge, and the Security tab shows the aggregated alert list.
[: GitHub Docs – About Dependency Review, ==========]
Question 2
Which of the following options would close a Dependabot alert?
- AOption A:
Creating a pull request to resolve the vulnerability that will be approved and merged
- BOption B:
Viewing the Dependabot alert on the Dependabot alerts tab of your repository
- COption C:
Viewing the dependency graph
- DOption D:
Leaving the repository in its current state
Show answer and explanation
Correct answer: A
A Dependabot alert is only marked as resolved when the related vulnerability is no longer present in your code — specifically after you merge a pull request that updates the vulnerable dependency.
Simply viewing alerts or graphs does not affect their status. Ignoring the alert by leaving the repo unchanged keeps the vulnerability active and unresolved.
[: GitHub Docs – Managing Dependabot Security Updates, ==========]
See all 5 free sample questions