GH-500 · Domain 6: GitHub Security suites administration · 13% of the exam
Task 6.1: Roll out and manage security features at scale
Enabling the security products at enterprise, organization and repository level, and how GitHub Enterprise Cloud and GitHub Enterprise Server differ.
Study it
Enabling the security products at scale on GitHub Enterprise Cloud and GitHub Enterprise Server
Lesson coming
Sample questions
Try each one before opening the answer. Every option is explained, with the GitHub documentation page that proves it.
Question 1 · choose 1
To control cost, an enterprise owner sets the Advanced Security policy so that GitHub Code Security is no longer allowed for one organization, where 50 repositories already use it. What happens to those 50 repositories?
ACode Security is turned off in all 50 at once, and their alerts are deleted
BThey keep Code Security, but repository administrators can't enable it on more repositories
CThey keep it until the end of the billing cycle, then it is turned off
DTheir administrators can still enable it on new repositories, because the policy applies only to new organizations
Show the answer and why
ACode Security is turned off in all 50 at once, and their alerts are deleted
Incorrect
The policy doesn't disable features that are already enabled.
BThey keep Code Security, but repository administrators can't enable it on more repositories
Correct
Disallowing stops further enablement only.
CThey keep it until the end of the billing cycle, then it is turned off
Incorrect
The policy isn't tied to the billing cycle.
DTheir administrators can still enable it on new repositories, because the policy applies only to new organizations
Incorrect
The policy applies to the chosen organization now.
Disallowing Secret Protection, Code Security or GitHub Advanced Security for an organization prevents repository administrators from enabling the features on additional repositories, but doesn't disable them where they are already enabled.
How can a GitHub Enterprise Server administrator check whether the license includes Advanced Security products?
ARun a code scanning workflow and see whether it fails on the instance
BOpen the License page in the enterprise settings
CRead the dependency graph
DAsk each organization owner
Show the answer and why
ARun a code scanning workflow and see whether it fails on the instance
Incorrect
That's an indirect guess.
BOpen the License page in the enterprise settings
Correct
The license page shows the products and current usage.
CRead the dependency graph
Incorrect
The graph isn't about licensing.
DAsk each organization owner
Incorrect
The license page answers it directly.
In the enterprise settings, click License. If the license includes GitHub Secret Protection, GitHub Code Security or GitHub Advanced Security, the page includes a section with details of current usage.
During a rollout, an enterprise owner wants a graph of the percentage of repositories with Dependabot, code scanning and secret scanning enabled over the last 90 days. Which security overview view shows this?
AThe Enablement view under Insights
BThe Campaigns view, which tracks campaign progress
CThe Risk view, which lists alerts by repository
DThe Assessments view, with the free risk assessment reports
Show the answer and why
AThe Enablement view under Insights
Correct
It shows enablement status and trends as a graph and a table, for a date range you choose.
BThe Campaigns view, which tracks campaign progress
Incorrect
Campaigns coordinate and measure remediation of selected alerts.
CThe Risk view, which lists alerts by repository
Incorrect
Risk explores the risk from security alerts, not enablement over time.
DThe Assessments view, with the free risk assessment reports
Incorrect
Assessments hold the free risk assessment reports, not enablement trends.
On the Security and quality tab of an organization or enterprise, Enablement under Insights opens the "Enablement trends" view. For Dependabot, code scanning or secret scanning it shows the percentage of repositories with the feature enabled as a graph and a detailed table, over a date range you pick, and it can be filtered.
How is Advanced Security licensed on a standalone GitHub Enterprise Server instance?
AMetered per minute of scanning
BFree for all repositories
CWith volume or subscription licenses
DPer repository with the feature enabled
Show the answer and why
AMetered per minute of scanning
Incorrect
That isn't the model.
BFree for all repositories
Incorrect
Server repositories need payment.
CWith volume or subscription licenses
Correct
Standalone Server instances use volume or subscription licenses.
DPer repository with the feature enabled
Incorrect
Licenses count committers.
All standalone instances of GitHub Enterprise Server use volume or subscription licenses; changes go through GitHub's sales team. You pay for Advanced Security in all repositories hosted on GitHub Enterprise Server.