Discuss Microsoft GH-500 Exam Topic 5 Question 23

Microsoft GH-500 Exam - Topic 5 Question 23 Discussion

Posted by Shannan on Oct 22, 2026 at 03:10 PM

Assuming that notification and alert recipients are not customized, what does GitHub do when it identifies a vulnerable dependency in a repository where Dependabot alerts are enabled? (Each answer presents part of the solution. Choose two.)

AIt generates a Dependabot alert and displays it on the Security tab for the repository.

BIt notifies the repository administrators about the new alert.

CIt generates Dependabot alerts by default for all private repositories.

DIt consults with a security service and conducts a thorough vulnerability review.

Suggested Answer: A, B

When GitHub identifies a vulnerable dependency in a repository with Dependabot alerts enabled, it performs the following actions:

Generates a Dependabot alert: The alert is displayed on the repository's Security tab, providing details about the vulnerability and affected dependency.

Notifies repository maintainers: By default, GitHub notifies users with write, maintain, or admin permissions about new Dependabot alerts.

GitHub Docs

These actions ensure that responsible parties are informed promptly to address the vulnerability.

References: GitHub Docs -- About Dependabot alerts; Configuring notifications for Dependabot alerts

==========

Get Premium GH-500 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

0 comments · newest first

Currently there are no comments in this discussion, be the first to comment!

Thread summary

Summary updated from 0 comments

Ready for the Next Question?

Explore more GH-500 questions and discover what you need to know next.

Explore All GH-500 Questions

Discussion details

Status Active
Contributions0
Created dateOct 22, 2026
Latest replyNo replies yet

Participants · 0

No participants yet

View all contributors →