这张认证到底考什么
先把考试形式、适合人群、备考时长和学习范围讲清楚，再决定要不要投入时间。
Certification Overview
GitHub Advanced Security (GHAS) certification validates your ability to secure code at scale using GitHub's integrated security toolset. GHAS provides code scanning powered by CodeQL, secret scanning with custom patterns, Dependabot for dependency management, and supply chain security features — all natively integrated into GitHub workflows.
Exam Domains
- Domain 1: Describe GHAS security features and functionality (15%)
- Domain 2: Configure and use secret scanning
- Domain 3: Configure and use dependency management
- Domain 4: Configure and use code scanning
- Domain 5: Use code scanning with CodeQL
- Domain 6: Describe GHAS best practices
- Domain 7: Configure GHAS tools in GitHub Enterprise
Who Should Take This
- Security engineers and DevSecOps practitioners implementing code security at scale
- Application security professionals integrating SAST into CI/CD pipelines
- GitHub Enterprise administrators managing organization-wide security policies
你会反复碰到的核心服务
CodeQLSecret ScanningDependabotSupply Chain SecurityCode ScanningSASTDevSecOpsGitHub Enterprise Security
学完以后你能带走什么
- Pass the GitHub Advanced Security certification exam with confidence
- Master key concepts across all exam domains
- Identify and strengthen weak areas before the exam
考试详情
考试代码
GHAS
发证机构
其他认证机构
时长
90 分钟
题目数
65 题
及格分
70/100
有效期
3 年
适合谁考
适合人群
- Security engineers implementing code security and vulnerability management at scale
- DevSecOps practitioners integrating security scanning into CI/CD pipelines
- Application security professionals conducting SAST and dependency analysis
- GitHub Enterprise administrators managing organization-wide security policies
开始前最好先有
- GitHub usage experience including repositories, Actions, and workflow configuration
- Basic application security concepts (OWASP Top 10, common vulnerability types)
- Familiarity with CI/CD pipelines and automated security scanning workflows
备考节奏
有 AWS 实操经验
8-10 周
零基础切入
12-16 周
建议日投入
1-2 小时/天
学习路径预览
3 章1
GitHub Advanced Security Exam Overview
40 min2
Advanced Security
120 min3
Exam Preparation & Practice
100 min同赛道认证对比
| GitHub Advanced Security | CCDAK | CCFA | |
|---|---|---|---|
| 机构 | 其他 | 其他 | 其他 |
| 级别 | 专业级 | 助理级 | 专业级 |
| 考试费 | $0 | $150 | $300 |
| 时长 | 90 min | 90 min | 90 min |
| 题量 | 65 | 60 | 60 |
| 有效期 | 3 年 | 2 年 | 3 年 |
备考技巧与常见失误
💡
65 题 90 分钟，平均每题 1 分钟，合理分配时间
💡
及格分 70/100，不确定的题先标记跳过，回头再做
💡
排除法非常有用 — 先排掉明显错误的选项，剩下的再分析
⚠️
没有读完所有选项就选答案 — 题目经常有"最佳"答案和"正确但不最佳"的干扰项
⚠️
备考只刷题不理解原理 — 考试场景题需要理解底层概念
⚠️
忽略时间管理 — 在难题上卡太久，导致后面简单题没时间做
FAQ
常见问题
如果你准备考 GitHub Advanced Security，先从真题型练习开始。
91+ 练习题、章节学习路径、模考、错题复盘和 AI 导师都在备考页里。
进入备考页$39 起 · 前 2 章可免费试学