Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix answers and links in advanced security Q17 and Q74 #269

Merged
merged 1 commit into from
Aug 20, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions content/questions/advanced_security/question-017.md
Original file line number Diff line number Diff line change
@@ -1,16 +1,16 @@
---
archetype: "questions"
title: "Question 017"
question: "Who will be notified when a NEW secret is pushed and detected in a repository? (Choose four.)"
question: "Who will be notified when a NEW secret is pushed and detected in a repository? (Choose five.)"
draft: false
---


> https://docs.github.com/en/code-security/secret-scanning/managing-alerts-from-secret-scanning#incremental-scans
> https://docs.github.com/en/code-security/secret-scanning/managing-alerts-from-secret-scanning/monitoring-alerts#incremental-scans
- [x] Repository Administrators
- [x] Security Managers
- [x] Users with with custom roles with read/write access
- [x] Users with custom roles with read/write access
- [x] Organization owners and enterprise owners, but only if they are administrators of repositories where secrets were leaked
- [x] Commit authors
- [ ] Everyone with write access to the repository
- [ ] All Organization owners and enterprise owners
- [ ] Commit authors
10 changes: 5 additions & 5 deletions content/questions/advanced_security/question-074.md
Original file line number Diff line number Diff line change
@@ -1,17 +1,17 @@
---
archetype: "questions"
title: "Question 074"
question: "Which of the following statements about enabling CodeQL scanning default setup are true? (Choose two.)"
question: "Which of the following statements about enabling CodeQL scanning default setup are true? (Choose three.)"
draft: false
---



> https://docs.github.com/en/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning-at-scale
> https://docs.github.com/en/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning
- [x] You can enable default setup for all eligible repositories in an organization at once in the organization settings
- [x] GitHub Actions need to be enabled as a prerequisite
- [ ] You can enable default setup on any repository, regardless of the contents of the repository
> You can enable default setup on repositories that use any of the CodeQL-supported languages
- [x] You can enable default setup on any repository, regardless of the contents of the repository
- [ ] You can only enable default setup on repositories that contain at least one CodeQL-supported language
> If you enable default setup on a repository that does not include any CodeQL-supported languages, default setup will not run any scans
- [ ] Default setup will scan the repository on a schedule that you can configure. For event based scanning, you need to configure a GitHub Action workflow
> Default setup includes scheduled scanning and pull request / push scanning on the default and protected branches
- [ ] You can only use the default query suite with default CodeQL scanning setup
Loading