GitHub Advanced Security CodeQL Analysis

1. What is DAST in the context of application security?

Dynamic Application Security Testing

Distributed Automated Security Tracking

Database Application Security Tool

Development Authentication and Security Token

2. What role does branch protection play in a secure development workflow?

It encrypts all branch data

It enforces code review and security checks before merging

It automatically deletes old branches

It prevents repository cloning

3. Which of the following is a best practice when using GitHub Advanced Security?

Ignore all low-severity alerts

Review and remediate vulnerabilities promptly and track them

Disable secret scanning to improve performance

Use the same API key across all repositories

4. In GitHub Advanced Security, what does the 'security' tab display?

All pull requests merged this month

A summary of security alerts, vulnerabilities, and scanning results

The repository's network graph

All issues labeled as bugs

5. What is the primary advantage of using CodeQL over other static analysis tools?

It is faster than all competitors

It treats code as queryable data, enabling custom security rules

It requires no configuration

It only works with Python code

6. Which GitHub feature prevents accidental exposure of sensitive data by scanning commits?

Code scanning

Dependency scanning

Secret scanning

License scanning

7. In CodeQL, what does the 'exists' predicate check for?

Whether a file has been modified

Whether a condition is true for at least one result

Whether a repository is public

Whether a user has admin access

8. What is the CVSS score used for in security assessments?

To measure code execution speed

To quantify the severity of security vulnerabilities

To count total lines of vulnerable code

To track developer productivity

9. Which of the following best describes threat modeling?

A process to identify, enumerate, and prioritize potential threats to a system

A method to compress data files

A technique to optimize database queries

A tool to manage user permissions

10. In GitHub Advanced Security, what does the security advisory feature allow?

To publish security vulnerabilities and provide patches

To delete all pull requests

To block all external contributors

To hide repository branches

11. What is CodeQL and what does it primarily enable developers to do?

A version control system for managing code repositories

A semantic code analysis engine that treats code as data to identify vulnerabilities

A continuous integration tool for automated testing

A package manager for resolving dependencies

12. Which severity level indicates the most critical security issue in GitHub alerts?

Low

Medium

Critical

Warning

13. What is the purpose of GitHub code scanning in Advanced Security?

To count lines of code in a repository

To identify security vulnerabilities and code quality issues automatically

To format code according to style guidelines

To backup repository data

14. Which of the following is a valid CodeQL query language construct?

FROM...WHERE...SELECT

IF...THEN...ELSE

SWITCH...CASE...DEFAULT

LOOP...ITERATE...BREAK

15. In CodeQL queries, what does the SELECT clause return?

The database connection string

The results matching the query conditions

The code language being analyzed

The repository metadata

16. What is the primary function of GitHub's secret scanning feature?

To detect hardcoded API keys, passwords, and other credentials

To encrypt all repository data

To hide sensitive files from contributors

To manage SSH key pairs

17. Which GitHub feature automatically generates pull requests to update vulnerable dependencies?

Code scanning

Secret scanning

Dependabot

Branch protection rules

18. What does SAST stand for in the context of security scanning?

Secure Application Source Testing

Static Application Security Testing

Systematic Automated Security Tracking

Source Authentication and Security Token

19. In GitHub Advanced Security, what is the primary purpose of Dependabot?

To monitor and alert on vulnerable dependencies in projects

To automatically delete unused code

To optimize Docker container sizes

To generate API documentation

20. Which of the following best describes a CodeQL database?

A relational representation of code structure and semantics

A storage system for version control history

A cache of compiled binary objects

A log of all commits and merge requests

GitHub Advanced Security CodeQL Analysis Quiz