Free Microsoft GH-500 Actual Exam Questions - Question 7 Discussion

Question No. 7
– [Configure and Use Dependency Management]
Which security feature shows a vulnerable dependency in a pull request?
Select one option, then reveal solution.
US
ZD
Zain D.
2026-02-11

Maybe B, since dependency review highlights issues right in the pull request itself.

0
OE
Osama E.
2026-02-09

C/D? Dependabot alerts (C) notify about vulnerabilities but usually after the PR is created, while the Security tab (D) is more of a dashboard, not PR-specific. So C fits better for showing issues tied to a PR.

0
JV
James V.
2026-01-25

A imo, the dependency graph just visualizes the dependencies but doesn’t highlight vulnerabilities directly in the PR like dependency review does. So it’s less likely.

0
CE
Carlos E.
2026-01-15

Option C also makes sense since Dependabot alerts notify about vulnerabilities directly.

0
KY
Karan Y.
2026-01-13

Pretty sure it’s B. Dependency review flags vulnerable dependencies right in the PR.

0