Practice · GitHub Advanced Security

~/azure-gh-500 · azure-gh-500_d1_0da8f974161c ▊

← GitHub Advanced Security · practice sheet

azure-gh-500_d1_0da8f974161c domain/d1 · medium single

A security administrator is configuring the GitHub connector for agentic code security in the Defender portal. They want the connector to identify security issues by scanning repositories but explicitly do not want Defender for DevOps to create issues, open pull requests, or modify Dependabot alerts. Which permission configuration meets these requirements?

A Select only the Write permission tier, since it supersedes Read
B Keep the default Read tier and decline the optional Write tier
C Remove the Read tier and enable a scan-only tier
D Enable both Read and Write, then disable issue creation afterward

Unlock this exam to join the per-question discussion and vote on questions.

next question →