GitHub Advanced Security Configuration Quiz

1. Which of the following best describes the purpose of GitHub's security advisories database?

Track and communicate known security vulnerabilities

Monitor user login attempts

Analyze code performance

Manage repository access permissions

2. GitHub's security overview provides a dashboard to view and manage security findings across multiple repositories. True or false?

True

False

3. Which GitHub feature allows you to automatically update vulnerable dependencies?

Dependabot

GitHub Pages

GitHub Marketplace

GitHub Discussions

Submit

5. What does the term 'transitive dependency' refer to?

A dependency of a dependency in your project

A direct package you explicitly install

A deprecated library no longer maintained

A temporary build-time dependency

6. GitHub's audit log records security-relevant actions and can be exported for compliance. True or false?

True

False

7. Which security feature analyzes your codebase for coding errors and security issues?

Code scanning

Access controls

Audit logging

IP whitelisting

Submit

9. What is the primary role of GitHub's push protection feature?

Prevent commits with detected secrets from being pushed

Automatically merge pull requests

Delete branches after merging

Encrypt commit messages

Submit

11. What is the primary purpose of GitHub's secret scanning feature?

Detect hardcoded credentials and API keys in repositories

Monitor network traffic between GitHub servers

Encrypt all repository data at rest

Analyze code performance metrics

12. Two-factor authentication (2FA) is optional for GitHub enterprise accounts. True or false?

True

False

13. What does GHSA stand for in GitHub security advisories?

GitHub Security Advisory

Global Hosting Security Alert

GitHub Software Authorization

General Host Security Agreement

14. GitHub's dependency graph can identify vulnerabilities in which types of dependencies?

Direct and transitive dependencies

Only direct dependencies

Only third-party libraries

Only language-specific packages

15. What is the main advantage of using branch protection rules?

Enforce code review and status checks before merging

Automatically delete old branches

Increase repository storage capacity

Speed up deployment processes

Submit

17. Which GitHub feature automatically detects vulnerable dependencies in your project?

Dependabot

GitHub Actions

Branch protection rules

CODEOWNERS file

18. CodeQL is a query language used to analyze code for security vulnerabilities. True or false?

True

False

19. What does SAML stand for in the context of GitHub authentication?

Security Assertion Markup Language

Secure Application Management Layer

System Access Management Link

Single Authentication Module Language

20. Which of the following is NOT a component of GitHub Advanced Security?

Code scanning with CodeQL

Dependency graph analysis

Real-time server monitoring

Secret scanning

GitHub Advanced Security Configuration Quiz

1. Which of the following best describes the purpose of GitHub's security advisories database?

2.

What first name or nickname would you like us to use?

2. GitHub's security overview provides a dashboard to view and manage security findings across multiple repositories. True or false?

3. Which GitHub feature allows you to automatically update vulnerable dependencies?

4. Require a minimum number of ______ before allowing pull request merges to enforce code review.

5. What does the term 'transitive dependency' refer to?

6. GitHub's audit log records security-relevant actions and can be exported for compliance. True or false?

7. Which security feature analyzes your codebase for coding errors and security issues?

8. OAuth tokens should be stored in GitHub ______ rather than hardcoded in repositories.

9. What is the primary role of GitHub's push protection feature?

10. Secret scanning can detect secrets in ______ and pull requests.

11. What is the primary purpose of GitHub's secret scanning feature?

12. Two-factor authentication (2FA) is optional for GitHub enterprise accounts. True or false?

13. What does GHSA stand for in GitHub security advisories?

14. GitHub's dependency graph can identify vulnerabilities in which types of dependencies?

15. What is the main advantage of using branch protection rules?

16. A CODEOWNERS file is used to define ______ for specific files or directories.

17. Which GitHub feature automatically detects vulnerable dependencies in your project?

18. CodeQL is a query language used to analyze code for security vulnerabilities. True or false?

19. What does SAML stand for in the context of GitHub authentication?

20. Which of the following is NOT a component of GitHub Advanced Security?