Exam Preparation Quiz

Explanations for each answer:

• Configure Dependabot alerts is correct. Dependabot alerts automatically notify repository owners when vulnerabilities or malware are detected in their repository dependencies. When enabled, Dependabot compares the project's dependencies against the GitHub Advisory Database and sends notifications when vulnerable dependencies are found.
• Configure branch protection rules for each repository is incorrect. Branch protection rules enforce workflow requirements but don't provide notifications about vulnerabilities or malware in dependencies.
• Subscribe all the repository owners to the GitHub Advisory Database is incorrect. While the GitHub Advisory Database contains vulnerability information, subscribing owners to it doesn't automatically notify them about vulnerabilities specific to their repositories.
• Configure CodeQL scanning actions is incorrect. CodeQL scanning helps identify vulnerabilities in your code, but doesn't automatically notify about vulnerable dependencies or malware found in the repository.