Track GitHub Advanced Security practice status, review GH-500 exam scope, and request IT Mastery coverage.
GitHub Advanced Security validates code-security knowledge across vulnerability identification, workflow security, secure implementation, and GitHub Advanced Security tooling in enterprise software development.
This page tracks the GitHub Advanced Security practice-bank rollout for IT Mastery. Dedicated simulator practice is not live yet, but you can review the snapshot, assessed domains, and related security routes while coverage is being prioritized.
| Domain | Weight |
|---|---|
| Describe the GHAS security features and functionality | 10% |
| Configure and use secret scanning | 10% |
| Configure and use dependency management | 15% |
| Configure and use code scanning | 15% |
| Use code scanning with CodeQL | 20% |
| Describe GitHub Advanced Security best practices | 20% |
| Configure GitHub Advanced Security tools in GitHub Enterprise | 10% |