Microsoft GitHub Administrator GH-500

Not sure a study set is what you need? Download the free GH-500 demo from Getcertkey and review a sample of the Microsoft GitHub Advanced Security practice questions before you spend anything — the 2026 edition is ready to try today.

Microsoft GH-500 Exam Overview:

Certification Vendor:	Microsoft
Exam Name:	GH-500: GitHub Advanced Security
Exam Number:	GH-500
Available Languages:	Spanish, Chinese (Simplified), German, Korean, Portuguese (Brazil), French, Arabic (Saudi Arabia), English, Japanese
Exam Format:	Scenario-based, Interactive tasks, Multiple-choice
Exam Duration:	100 minutes
Exam Price:	$99 USD
Certificate Validity Period:	1 year
Passing Score:	700 / 1000
Real Exam Qty:	40–60
Recommended Training:	GitHub Advanced Security Learning Path Course GH-500T00: GitHub Advanced Security
Exam Registration:	Microsoft Learn Exam Registration Pearson VUE Scheduling
Sample Questions:
Exam Way:	Online proctored or onsite testing via Pearson VUE
Pre Condition:	Familiarity with GitHub fundamentals, CI/CD pipelines, and secure development practices; no mandatory prerequisite exams
Official Syllabus URL:	https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/gh-500

Microsoft GH-500 Exam Syllabus Topics:

GH-500 Exam FAQs for 2026 Candidates

Which certification does the GH-500 exam lead to?

The GH-500 exam is the official Microsoft exam behind the Microsoft Certified: GitHub Advanced Security certification, validating the skills measured by the Microsoft GitHub Advanced Security credential. It sits at the Associate level of the Microsoft certification program.

How many questions are on the GH-500 exam, and how much time do I get?

The GH-500 exam contains 40–60 questions to be completed within 100 minutes. Before exam day, divide the available time by the question count to work out a comfortable per-question pace, and mark any item that eats into it so you can return later instead of getting stuck. Timed sessions in the Getcertkey test engines make that pacing automatic — run at least two full-length mock exams under the clock so time pressure never becomes the reason you drop points.

What score do I need to pass the GH-500 exam, and what does it cost?

The passing score for the GH-500 exam is 700 / 1000, and the official registration fee is $99 USD. Retakes are not discounted — every new attempt means paying the full fee again — so it pays to measure yourself before you book. Work through the 139 practice questions on Getcertkey, sit a timed practice test, and schedule your exam only when your scores are consistently comfortable. That simple habit is the cheapest exam strategy there is.

Are there any prerequisites for the GH-500 exam?

Familiarity with GitHub fundamentals, CI/CD pipelines, and secure development practices; no mandatory prerequisite exams Requirements can change when Microsoft revises its certification program, so confirm the current eligibility rules on the official exam page before you register.

How do I register for the GH-500 exam?

You can book the Microsoft GitHub Advanced Security exam through the official registration channels below:

• Microsoft Learn Exam Registration
• Pearson VUE Scheduling

As for delivery, the exam is offered in the following format: Online proctored or onsite testing via Pearson VUE. Choose the option that suits you best when you book your seat.

What official training is recommended for the GH-500 exam?

Microsoft recommends the following training resources for the Microsoft GitHub Advanced Security exam:

• GitHub Advanced Security Learning Path
• Course GH-500T00: GitHub Advanced Security

Official courses build the foundation; the 139 practice questions from Getcertkey then show you how that knowledge is examined, so the two work best together.

Can I try the GH-500 practice questions before I buy?

Yes. Getcertkey provides a free GH-500 PDF demo so you can review the question style and answer quality before purchasing. Every purchase also includes 365 days of free updates — if Microsoft revises the exam during that period, the updated material reaches you at no cost. Once the free-update year ends, you can extend your update service at a 50% discount.

What if I fail the GH-500 exam, and how is my order delivered?

Every Microsoft GitHub Advanced Security purchase on Getcertkey is covered by a 100% money-back guarantee with clear conditions: if you take the corresponding exam within 60 days of your purchase and do not pass, you can claim a full refund by submitting a scanned copy of your exam enrollment slip and your official score report as a PDF within two days of the exam date; claims are processed within seven days of submission. The guarantee does not apply to exams taken within three days of purchase, to material that was downloaded but never used in an exam attempt, or to free products and expired orders, and the candidate name must match the payer name. If you would rather not take a refund, you can instead exchange your purchase for two free exam preparation products of equal value and keep the update service on your original product.

Delivery is instant: your download is sent to your email within one minute of payment, with no limit on how many computers you may install the material on. If nothing arrives within two hours, check your spam folder and contact customer service for help.

What topics are covered in the GH-500 exam?

The Microsoft GitHub Advanced Security exam blueprint is organized into 6 domains. The first three are:

• Security operations: best practices, prioritization, and remediation — 15–20% of the exam
• Configure and use supply chain security — 15–20% of the exam
• Configure and use Code Security — 10–15% of the exam

For the complete domain-by-domain breakdown, scroll up to the full exam topics outline above and use it to plan how you distribute your study time.

Microsoft GitHub Advanced Security Sample Questions:

Question #1
After defining a secret scanning custom pattern, what is the final step before publishing the pattern?

A. performing a dry run
B. defining a custom pattern
C. enabling push protection
D. adding additional match requirements

Question #2
Using advanced setup, which code scanning configuration would help detect vulnerabilities before they are added to a shared branch?

A. on:
pull_request:
B. on:
issues:
C. on:
schedule:
D. on:
workflow_dispatch:

Question #3
Hotspot Question
You have a GitHub Enterprise Cloud repository named Repo1 that uses GitHub Advanced Security code scanning with CodeQL advanced setup. Repo1 stores JavaScript and Python source code and a workflow named Workflow1. Workflow1 uses matrix.language to analyze each programming language in parallel.
You perform the following actions:
- Define additional query packs for each language by using a custom
CodeQL configuration file.
- In Workflow1A, ad security-and-quality and packs: scope/pack1 queries directly to github/codeql-action/init@v4.
You discover that the additional query packs from the custom configuration file no longer run.
You need to ensure that CodeQL runs the security-and-quality query suite and the additional query packs defined in the configuration file for both languages.
How should you configure github/codeql-action/init@v4? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Question #4
What is the difference between scheduled versus triggered events in code scanning?

A. Triggered events run less frequently than scheduled events.
B. Scheduled events can only be set up by administrators.
C. Scheduled events are more difficult to configure than triggered events.
D. Scheduled events run based on a specified schedule and triggered events run on code events such as a push.

Question #5
What role is required to change a repository's code scanning severity threshold that fails a pull request status check?

A. Maintain
B. Admin
C. Triage
D. Write

Solutions: