GH-500 무료 덤프문제 온라인 액세스

In a private repository, what minimum requirements does GitHub need to generate a dependency graph? (Each answer presents part of the solution. Choose two.)

• A.dependency graph enabled at the organization level for all new private repositories
• B.read-only access to the dependency manifest and lock files for a repository
• C.write access to the dependency manifest and lock files for an enterprise
• D.read-only access to all the repository's files

When code scanning is enabled, what is one default event that triggers a scan?

• A.Creating a new branch.
• B.Deleting a branch.
• C.Pushing a change.
• D.Merging a branch.

What are Dependabot security updates?

• A.automated pull requests that help you update dependencies that have known vulnerabilities
• B.compatibility scores to let you know whether updating a dependency could cause breaking changes to your project
• C.automated pull requests to update the manifest to the latest version of the dependency
• D.automated pull requests that keep your dependencies updated, even when they don't have any vulnerabilities

How many alerts are created when two instances of the same secret value are in the same repository?

• A.2
• B.4
• C.3
• D.1

Which of the following secret scanning features can verify whether a secret is still active?

• A.push protection
• B.custom patterns
• C.validity checks
• D.branch protection