1166 お客様のコメント
質問 1：
You are a maintainer of a repository and Dependabot notifies you of a vulnerability. Where could the vulnerability have been disclosed? (Each answer presents part of the solution. Choose two.)
A. In manifest and lock files
B. In the dependency graph
C. In the National Vulnerability Database
D. In security advisories reported on GitHub
正解：C,D
解説: (Pass4Test メンバーにのみ表示されます)
質問 2：
Which of the following options would close a Dependabot alert?
A. Viewing the dependency graph
B. Creating a pull request to resolve the vulnerability that will be approved and merged
C. Viewing the Dependabot alert on the Dependabot alerts tab of your repository
D. Leaving the repository in its current state
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 3：
Which of the following is the most complete method for Dependabot to find vulnerabilities in third-party dependencies?
A. A dependency graph is created, and Dependabot compares the graph to the GitHub Advisorydatabase
B. CodeQL analyzes the code and raises vulnerabilities in third-party dependencies
C. The build tool finds the vulnerable dependencies and calls the Dependabot API
D. Dependabot reviews manifest files in the repository
正解：A
解説: (Pass4Test メンバーにのみ表示されます)
質問 4：
Which of the following steps should you follow to integrate CodeQL into a third-party continuous integration system? (Each answer presents part of the solution. Choose three.)
A. Analyze code
B. Install the CLI
C. Upload scan results
D. Write queries
E. Process alerts
正解：A,B,C
解説: (Pass4Test メンバーにのみ表示されます)
質問 5：
How many alerts are created when two instances of the same secret value are in the same repository?
A. 4
B. 1
C. 3
D. 2
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
You are a maintainer of a repository and Dependabot notifies you of a vulnerability. Where could the vulnerability have been disclosed? (Each answer presents part of the solution. Choose two.)
A. In manifest and lock files
B. In the dependency graph
C. In the National Vulnerability Database
D. In security advisories reported on GitHub
正解：C,D
解説: (Pass4Test メンバーにのみ表示されます)
質問 2：
Which of the following options would close a Dependabot alert?
A. Viewing the dependency graph
B. Creating a pull request to resolve the vulnerability that will be approved and merged
C. Viewing the Dependabot alert on the Dependabot alerts tab of your repository
D. Leaving the repository in its current state
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 3：
Which of the following is the most complete method for Dependabot to find vulnerabilities in third-party dependencies?
A. A dependency graph is created, and Dependabot compares the graph to the GitHub Advisorydatabase
B. CodeQL analyzes the code and raises vulnerabilities in third-party dependencies
C. The build tool finds the vulnerable dependencies and calls the Dependabot API
D. Dependabot reviews manifest files in the repository
正解：A
解説: (Pass4Test メンバーにのみ表示されます)
質問 4：
Which of the following steps should you follow to integrate CodeQL into a third-party continuous integration system? (Each answer presents part of the solution. Choose three.)
A. Analyze code
B. Install the CLI
C. Upload scan results
D. Write queries
E. Process alerts
正解：A,B,C
解説: (Pass4Test メンバーにのみ表示されます)
質問 5：
How many alerts are created when two instances of the same secret value are in the same repository?
A. 4
B. 1
C. 3
D. 2
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
Masumizu -
しっかり頭に入る構成になっている。過去問題もしっかりついていて、これ一冊でかなりGitHub-Advanced-Security合格に近づけそうです。