最新的GitHub Advanced Security GHAS - GitHub-Advanced-Security免費考試真題

A. Read-only access to the dependency manifest and lock files for a repository

B. Write access to the dependency manifest and lock files for an enterprise

C. Read-only access to all the repository's files

D. Dependency graph enabled at the organization level for all new private repositories

A. It notifies the repository administrators about the new alert.

B. It generates a Dependabot alert and displays it on the Security tab for the repository.

C. It generates Dependabot alerts by default for all private repositories.

D. It consults with a security service and conducts a thorough vulnerability review.

A. When a pull request adding a vulnerable dependency is opened

B. When Dependabot opens a pull request to update a vulnerable dependency

C. As soon as a pull request is opened by a contributor

D. As soon as a vulnerable dependency is detected

A. It analyzes a GitHub repository to find security vulnerabilities

B. It scans your entire Git history on branches present in your GitHub repository for any secrets

C. It contacts maintainers to ask them to create security advisories if a vulnerability is found

D. It prevents code pushes with vulnerabilities as a pre-receive hook

A. Add a workflow with the dependency review action.

B. Add Dependabot rules.

C. Enable Dependabot security updates.

D. Enable Dependabot alerts.

A. Automated pull requests that keep your dependencies updated, even when they don't have any vulnerabilities

B. Automated pull requests to update the manifest to the latest version of the dependency

C. Automated pull requests that help you update dependencies that have known vulnerabilities

D. Compatibility scores to let you know whether updating a dependency could cause breaking changes to your project

A. security-extended

B. github/codeql/cpp/ql/src@main

C. github/codeql-go/ql/src@main

A. Compile the source code.

B. Use CodeQL, which implicitly detects the supported languages in your code base.

C. Remove specific build steps.

D. Remove the autobuild step from your code scanning workflow and add specific build steps.