About This Domain
Domain 3 — Configure and Use Secret Scanning — accounts for 25% of the GH-SECURITY certification exam. This domain evaluates your understanding of secret scanning enablement, push protection, custom patterns, and related concepts. Secret detection and push protection.
What You'll Be Tested On
- Secret scanning enablement
- Push protection
- Custom patterns
- Alert remediation
Key GitHub Features in This Domain
Study Strategy for Domain 3
This domain represents 25% of the total exam, making it a significant scoring area.
Exam Tips for Domain 3
Push protection blocks secrets BEFORE they enter the repository. Secret scanning finds them AFTER.
Frequently Asked Questions
How many questions come from Domain 3?
Domain 3 (Configure and Use Secret Scanning) makes up 25% of the GH-SECURITY exam.
What should I focus on for Domain 3?
Key features include Secret Scanning.
How should I prepare for Configure and Use Secret Scanning questions?
Review key topics, then practice with domain-specific questions focusing on real-world scenarios.
What's the best order to study GH-SECURITY domains?
Start with highest-weighted: Describe GHAS (10%), Configure and Use Code Scanning (25%), Configure and Use Secret Scanning (25%), Configure and Use Dependency Management (25%), GHAS Administration (15%).
Practice Domain 3 Questions
Test your knowledge of Configure and Use Secret Scanning with practice questions from our GH-SECURITY question bank.
Start Practice Quiz →