Browse Certification Practice Tests by Exam Family

GitHub Advanced Security Practice Status

Track GitHub Advanced Security practice status, review GH-500 exam scope, and request IT Mastery coverage.

GitHub Advanced Security validates code-security knowledge across vulnerability identification, workflow security, secure implementation, and GitHub Advanced Security tooling in enterprise software development.

This page tracks the GitHub Advanced Security practice-bank rollout for IT Mastery. Dedicated simulator practice is not live yet, but you can review the snapshot, assessed domains, and related security routes while coverage is being prioritized.

GitHub Advanced Security snapshot

  • Vendor: GitHub
  • Credential name: GitHub Advanced Security
  • Microsoft Learn study-guide code: GH-500
  • Level shown by Microsoft Learn: Intermediate
  • Exam time shown by Microsoft Learn: 100 minutes
  • Current IT Mastery status: full simulator not yet live

Topic coverage for Advanced Security practice

DomainWeight
Describe the GHAS security features and functionality10%
Configure and use secret scanning10%
Configure and use dependency management15%
Configure and use code scanning15%
Use code scanning with CodeQL20%
Describe GitHub Advanced Security best practices20%
Configure GitHub Advanced Security tools in GitHub Enterprise10%

Official sources

Revised on Saturday, April 25, 2026