Free Microsoft GH-500 Actual Exam Questions - Question 6 Discussion
Which of the following benefits do code scanning, secret scanning, and dependency review provide?
Maybe A, it’s the only option that covers all three tools properly instead of just one or two parts. C just talks about dependencies, so doesn’t fully fit the question.
Option C fits since it focuses on alerts for vulnerable dependencies, which is a key benefit of dependency review. The others mention broader or slightly different features that don’t cover all three tools equally.
Guessing A since it clearly covers all three tools’ main functions: code scanning finds vulnerabilities, secret scanning detects secrets, and dependency review shows dependency impacts. The others seem more partial or specific.
Maybe D, but I think it’s pushing it to say it “automatically raises pull requests” for all those tools. That sounds more like a feature specific to dependency review rather than code or secret scanning. A seems broader and fits the combined benefits better—covering vulnerability scanning, secret detection, and impact analysis on dependencies all at once. B and C feel too narrow since they don’t cover everything mentioned in the question. So I’d stick with A mainly because it hits all three aspects without assuming extra automation.
Option A makes the most sense since it covers all three tools: code scanning looks for vulnerabilities, secret scanning finds exposed secrets, and dependency review shows how dependency changes affect the project. The other options seem too focused on just one aspect or describe features like automated pull requests, which aren’t really core to these security tools combined. This question is about the broad benefits, so A fits best.
Maybe D isn’t quite right because automatically raising PRs sounds like a feature more related to automated dependency updates rather than the combined benefits of scanning and review. B and C seem too narrow, focusing on just reporting or alerts. A covers all the tools mentioned and what they do, so it fits best from that perspective.
A sounds right—code scanning finds vulnerabilities, secret scanning detects secrets, and dependency review shows how changes impact dependencies.