About This Domain
Domain 4 — Configure and Use Dependency Management — accounts for 25% of the GH-SECURITY certification exam. This domain evaluates your understanding of dependency graph, dependabot alerts and updates, dependency review action, and related concepts. Supply chain security tools.
What You'll Be Tested On
- Dependency graph
- Dependabot alerts and updates
- Dependency review action
- Advisory database and SBOM
Key GitHub Features in This Domain
Study Strategy for Domain 4
This domain represents 25% of the total exam, making it a significant scoring area.
Exam Tips for Domain 4
Dependency review action blocks PRs that introduce vulnerable dependencies.
Frequently Asked Questions
How many questions come from Domain 4?
Domain 4 (Configure and Use Dependency Management) makes up 25% of the GH-SECURITY exam.
What should I focus on for Domain 4?
Key features include Supply Chain Security.
How should I prepare for Configure and Use Dependency Management questions?
Review key topics, then practice with domain-specific questions focusing on real-world scenarios.
What's the best order to study GH-SECURITY domains?
Start with highest-weighted: Describe GHAS (10%), Configure and Use Code Scanning (25%), Configure and Use Secret Scanning (25%), Configure and Use Dependency Management (25%), GHAS Administration (15%).
Practice Domain 4 Questions
Test your knowledge of Configure and Use Dependency Management with practice questions from our GH-SECURITY question bank.
Start Practice Quiz →