GitHub GitHub-Advanced-Security 考試大綱：

主題	簡介
主題 1	Configure and use dependency management: This section of the exam measures skills of a DevSecOps Engineer and covers configuring dependency management workflows to identify and remediate vulnerable or outdated packages. Candidates will show how to enable Dependabot for version updates, review dependency alerts, and integrate these tools into automated CI CD pipelines to maintain secure software supply chains.
主題 2	Configure and use code scanning: This section of the exam measures skills of a DevSecOps Engineer and covers enabling and customizing GitHub code scanning with built?in or marketplace rulesets. Examinees must know how to interpret scan results, triage findings, and configure exclusion or override settings to reduce noise and focus on high?priority vulnerabilities.
主題 3	Use code scanning with CodeQL: This section of the exam measures skills of a DevSecOps Engineer and covers working with CodeQL to write or customize queries for deeper semantic analysis. Candidates should demonstrate how to configure CodeQL workflows, understand query suites, and interpret CodeQL alerts to uncover complex code issues beyond standard static analysis.
主題 4	Describe the GHAS security features and functionality: This section of the exam measures skills of a GitHub Administrator and covers identifying and explaining the built?in security capabilities that GitHub Advanced Security provides. Candidates should be able to articulate how features such as code scanning, secret scanning, and dependency management integrate into GitHub repositories and workflows to enhance overall code safety.
主題 5	Configure and use secret scanning: This section of the exam measures skills of a DevSecOps Engineer and covers setting up and managing secret scanning in organizations and repositories. Test?takers must demonstrate how to enable secret scanning, interpret the alerts generated when sensitive data is exposed, and implement policies to prevent and remediate credential leaks.

GitHub GitHub-Advanced-Security 考試概覽:

認證廠商:	GitHub
考試名稱:	GitHub Advanced Security GHAS 考試
考試代碼:	GH-500
證照有效期限:	24 個月
及格分數:	70%
支援語言:	日文, 西班牙文, 英文, 葡萄牙文, 韓文
實際考試題數:	65
考試費用:	99 美元
考試形式:	單選題, 選擇題, 複選題
考試時間:	100 分鐘
相關認證:	GitHub Copilot GitHub Administration GitHub Foundations
推薦課程:	Microsoft Learn 學習指南 GitHub Learn 官方訓練課程
考試報名:	GitHub 認證考試報名 Pearson VUE 考試預約
範例考題:	GitHub GitHub-Advanced-Security 範例考題
考試方式:	線上遠端監考或至 Pearson VUE 考場應試
必備條件:	無強制先修條件；建議具備：GitHub 基礎知識、CI/CD 相關知識與安全開發經驗
官方大綱網址:	https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/gh-500