Microsoft GH-300 Practice Test 46
Question 450
A code review finds a near-verbatim open-source function without attribution. What should the maintainer do?
- Review provenance as appropriate; absence of a match notice does not prove originality.
- Verify no confidential material is included and obtain appropriate publication approval.
- Consult compliance policy and determine whether to attribute, rewrite, or reject reuse.
- Trace origin and reconcile license and attribution obligations before merge.
Explanation
Correct Answer
D:Similar text can create compliance questions regardless of AI assistance.
Incorrect Answers
A:Public-code matching indexes and thresholds are incomplete by design. What should the maintainer do. Similar text can create compliance questions regardless of AI assistance.
B:Output inspection matters even if the prompt was processed privately. Similar text can create compliance questions regardless of AI assistance.
C:License compatibility must be evaluated for the distribution model. similar text can create compliance questions regardless of AI assistance.
Question 451
A developer accidentally pastes a live service token into Copilot Chat. What is the most urgent action?
- Collect authorized session and incident metadata without copying the secret into new records.
- Revoke or rotate the token and follow the incident process for possible exposure.
- Generate synthetic records preserving types and edge-case distributions.
- Remove the key, rotate it if exposed, and inspect version-control history.
Explanation
Correct Answer
B:Deleting a message alone cannot guarantee a disclosed token is unusable.
Incorrect Answers
A:Evidence gathering must avoid spreading the sensitive value further. deleting a message alone cannot guarantee a disclosed token is unusable.
C:Synthetic data reduces exposure while keeping meaningful test scenarios. Deleting a message alone cannot guarantee a disclosed token is unusable.
D:Source history may continue to reveal a secret after a line is deleted. deleting a message alone cannot guarantee a disclosed token is unusable.
Question 452
An issue template includes customers' real passwords for reproducibility. What should be changed?
- Revoke or rotate the token and follow the incident process for possible exposure.
- Collect authorized session and incident metadata without copying the secret into new records.
- Remove credentials and use sanitized, fictional reproduction fixtures.
- Generate synthetic records preserving types and edge-case distributions.
Explanation
Correct Answer
C:Debugging should not require actual passwords.
Incorrect Answers
A:Deleting a message alone cannot guarantee a disclosed token is unusable. What should be changed. Debugging should not require actual passwords.
B:Evidence gathering must avoid spreading the sensitive value further. debugging should not require actual passwords.
D:Synthetic data reduces exposure while keeping meaningful test scenarios. Debugging should not require actual passwords.
Question 453
A suggested patch includes a sensitive signing key in code comments. What correction is needed?
- Remove credentials and use sanitized, fictional reproduction fixtures.
- Revoke or rotate the token and follow the incident process for possible exposure.
- Remove the key, rotate it if exposed, and inspect version-control history.
- Collect authorized session and incident metadata without copying the secret into new records.
Explanation
Correct Answer
C:Source history may continue to reveal a secret after a line is deleted.
Incorrect Answers
A:Debugging should not require actual passwords. source history may continue to reveal a secret after a line is deleted.
B:Deleting a message alone cannot guarantee a disclosed token is unusable. What correction is needed. Source history may continue to reveal a secret after a line is deleted.
D:Evidence gathering must avoid spreading the sensitive value further. source history may continue to reveal a secret after a line is deleted.
Question 454
A project uses production datasets as context for unit-test generation. What alternative fits?
- Revoke or rotate the token and follow the incident process for possible exposure.
- Remove credentials and use sanitized, fictional reproduction fixtures.
- Remove the key, rotate it if exposed, and inspect version-control history.
- Generate synthetic records preserving types and edge-case distributions.
Explanation
Correct Answer
D:Synthetic data reduces exposure while keeping meaningful test scenarios.
Incorrect Answers
A:Deleting a message alone cannot guarantee a disclosed token is unusable. What alternative fits. Synthetic data reduces exposure while keeping meaningful test scenarios.
B:Debugging should not require actual passwords. synthetic data reduces exposure while keeping meaningful test scenarios.
C:Source history may continue to reveal a secret after a line is deleted. Synthetic data reduces exposure while keeping meaningful test scenarios.
Question 455
An engineer accidentally places a live API key in a Copilot conversation and in generated code. Which TWO remediation actions are necessary? (Select TWO.)
- Assume deleting the chat bubble invalidates the credential.
- Rotate or revoke the exposed key and follow the approved incident procedure.
- Remove the key from code and review repository history or other distribution paths.
- Turn off logging so nobody can notice potential misuse.
- Keep the key in test fixtures because it was generated by AI.
Explanation
Correct Answers
B:Credential validity must be ended independently of text cleanup.
C:Generated artifacts and commits can retain the exposed value.
Incorrect Answers
A:Text removal cannot revoke a secret.
D:Suppressing audit evidence hinders incident response.
E:Reusable credentials remain sensitive regardless of origin.
Question 456
A repository admin configures an allow setting that conflicts with enterprise restrictions. What should they expect?
- Apply supported enterprise governance policies where their scope allows it.
- Check whether their role permits viewing without administrative policy modification.
- Verify inherited enterprise policy; local settings cannot be assumed to override stricter governance.
- Confirm signed-in account, policy propagation, client support, and extension state.
Explanation
Correct Answer
C:Higher-level organizational rules can constrain feature access.
Incorrect Answers
A:Central policy can reduce configuration drift across subordinate organizations. higher-level organizational rules can constrain feature access.
B:Repository role and organization ownership determine who can change exclusions. Higher-level organizational rules can constrain feature access.
D:Effective client behavior may depend on more than the administrator's saved setting. What should they expect. Higher-level organizational rules can constrain feature access.
Question 457
A company enables public-code matching on personal accounts but wants managed accounts blocked. What should it configure?
- Verify inherited enterprise policy; local settings cannot be assumed to override stricter governance.
- Set the applicable business or enterprise policy for managed subscriptions.
- Apply supported enterprise governance policies where their scope allows it.
- Confirm signed-in account, policy propagation, client support, and extension state.
Explanation
Correct Answer
B:Per-user preferences need not supersede managed policy.
Incorrect Answers
A:Higher-level organizational rules can constrain feature access. per-user preferences need not supersede managed policy.
C:Central policy can reduce configuration drift across subordinate organizations. per-user preferences need not supersede managed policy.
D:Effective client behavior may depend on more than the administrator's saved setting. What should it configure. Per-user preferences need not supersede managed policy.
Question 458
A managed user sees content exclusion controls but cannot edit them. Why might this occur?
- Confirm signed-in account, policy propagation, client support, and extension state.
- Check whether their role permits viewing without administrative policy modification.
- Set the applicable business or enterprise policy for managed subscriptions.
- Verify inherited enterprise policy; local settings cannot be assumed to override stricter governance.
Explanation
Correct Answer
B:Repository role and organization ownership determine who can change exclusions.
Incorrect Answers
A:Effective client behavior may depend on more than the administrator's saved setting. Why might this occur. Repository role and organization ownership determine who can change exclusions.
C:Per-user preferences need not supersede managed policy. Repository role and organization ownership determine who can change exclusions.
D:Higher-level organizational rules can constrain feature access. repository role and organization ownership determine who can change exclusions.
Question 459
A team wants uniform Copilot settings across multiple organizations. What should it use?
- Set the applicable business or enterprise policy for managed subscriptions.
- Apply supported enterprise governance policies where their scope allows it.
- Verify inherited enterprise policy; local settings cannot be assumed to override stricter governance.
- Check whether their role permits viewing without administrative policy modification.
Explanation
Correct Answer
B:Central policy can reduce configuration drift across subordinate organizations.
Incorrect Answers
A:Per-user preferences need not supersede managed policy. Central policy can reduce configuration drift across subordinate organizations.
C:Higher-level organizational rules can constrain feature access. central policy can reduce configuration drift across subordinate organizations.
D:Repository role and organization ownership determine who can change exclusions. central policy can reduce configuration drift across subordinate organizations.
Question 460
An organization changes policies but one developer sees old behavior. What should be verified?
- Apply supported enterprise governance policies where their scope allows it.
- Set the applicable business or enterprise policy for managed subscriptions.
- Check whether their role permits viewing without administrative policy modification.
- Confirm signed-in account, policy propagation, client support, and extension state.
Explanation
Correct Answer
D:Effective client behavior may depend on more than the administrator's saved setting.
Incorrect Answers
A:Central policy can reduce configuration drift across subordinate organizations. What should be verified. Effective client behavior may depend on more than the administrator's saved setting.
B:Per-user preferences need not supersede managed policy. Effective client behavior may depend on more than the administrator's saved setting.
C:Repository role and organization ownership determine who can change exclusions. effective client behavior may depend on more than the administrator's saved setting.
