Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft GH-500 Exam - Topic 2 Question 15 Discussion

-- [Configure and Use Dependency Management]You have enabled security updates for a repository. When does GitHub mark a Dependabot alert as resolved for that repository?
D) When you merge a pull request that contains a security update
A) When Dependabot creates a pull request to update dependencies
B) When you dismiss the Dependabot alert
C) When the pull request checks are successful

Microsoft GH-500 Exam - Topic 2 Question 15 Discussion

Actual exam question for Microsoft's GH-500 exam
Question #: 15
Topic #: 2
[All GH-500 Questions]

-- [Configure and Use Dependency Management]

You have enabled security updates for a repository. When does GitHub mark a Dependabot alert as resolved for that repository?

Show Suggested Answer Hide Answer
Suggested Answer: D

A Dependabot alert is marked as resolved only after the related pull request is merged into the repository. This indicates that the vulnerable dependency has been officially replaced with a secure version in the active codebase.

Simply generating a PR or passing checks does not change the alert status; merging is the key step.


by Tarra at May 11, 2026, 03:06 AM

Limited Time Offer

25%

Off

Get Premium GH-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Joni
4 days ago
A is just the start. D is the real deal.
upvoted 0 times
...
Marguerita
9 days ago
But what about A? The pull request is important too.
upvoted 0 times
...
Rory
14 days ago
I agree, D makes sense. It finalizes the update.
upvoted 0 times
...
Myrtie
19 days ago
I think it's D. Merging is key for resolution.
upvoted 0 times
...
Lonna
25 days ago
I disagree, I think it should be A since the PR is created.
upvoted 0 times
...
Elmira
30 days ago
Definitely D, merging is key for security updates.
upvoted 0 times
...
Leota
1 month ago
Wait, so just dismissing the alert doesn't fix it? That's surprising!
upvoted 0 times
...
Viki
1 month ago
I thought it was A at first, but D makes more sense.
upvoted 0 times
...
Julie
2 months ago
It's D, you need to merge the PR for it to be resolved.
upvoted 0 times
...
Lashandra
2 months ago
Nah, it's definitely B. You can just ignore the alerts, right?
upvoted 0 times
...
Kristian
2 months ago
Definitely C, the checks need to pass first!
upvoted 0 times
...
Denise
2 months ago
Wait, so just dismissing the alert doesn't fix it? That's surprising!
upvoted 0 times
...
Brittni
2 months ago
I thought it was A at first, but D makes more sense.
upvoted 0 times
...
Stefan
2 months ago
It's D! Merging the PR resolves the alert.
upvoted 0 times
...
Sharika
3 months ago
I’m confused about this one. I thought it was when Dependabot creates a pull request, so I might go with A, but D seems plausible too.
upvoted 0 times
...
Corrina
3 months ago
I feel like I’ve seen a similar question before, and it was about the pull request checks being successful. Maybe it’s option C?
upvoted 0 times
...
Elmer
3 months ago
I’m not entirely sure, but I remember something about dismissing alerts. Could it be option B?
upvoted 0 times
...
Eura
4 months ago
I think Dependabot marks the alert as resolved when you merge a pull request that contains a security update, so I’m leaning towards option D.
upvoted 0 times
...

Save Cancel