GH-500: GitHub Advanced Security

Pick how to study

• Try 10 free GH-500 questions
• GH-500 mock exam: timed, you pick the length
• GH-500 flashcards: spaced repetition
• GH-500 decision sheets: look-alike services, settled

The GH-500 exam

• Questions: 306

Why earn the GH-500 certification in 2026

GH-500 is Microsoft's associate-level certification for GitHub Advanced Security. Microsoft aims it at candidates with experience securing code, secrets, and dependencies across the development lifecycle, familiar with GitHub fundamentals and CI/CD. There is no prerequisite certification. The exam covers the GitHub security suite, secret protection, supply chain security, code security, security operations, and administration.

Who should sit this exam

Application security engineers, DevSecOps professionals implementing shift-left security, development leads integrating security into CI/CD, and security analysts reviewing code vulnerabilities.

Exam tips

• Master CodeQL: custom queries, query suites, and code scanning configuration
• Know secret scanning patterns, push protection, and custom secret patterns
• Understand Dependabot: version updates, security updates, and grouping strategies
• Review security overview dashboards and organisation-level security policies

GH-500 study resources

• Build a study plan: tell us your exam date and we schedule daily practice and review sessions backwards from the date.
• Decision sheets: each sheet settles one choice between look-alike services, verdict first, then the comparison, then the traps.

Other Associate certifications

• GitHub Actions (GH-200) practice exam
• GitHub Copilot (GH-300) practice exam

Ready for GH-500?

Try the practice surface for free. Answer a few questions, see the spacing loop, then decide. Try 10 free GH-500 questions or browse the catalogue.