Question 430
A team reports: A Node service performs CPU-heavy transformations on its main event loop and sees long request tail latency. They observe: The endpoint stalls while a synchronous transform monopolizes the event loop. Which ONE technical decision most directly corrects the cause?
- Use Copilot to propose an appropriate worker or asynchronous architecture without changing the endpoint response contract.
- Ask Copilot to identify the N+1 pattern and propose batching or a join while preserving result order.
- Ask Copilot for a scoped async conversion with unchanged HTTP codes and retry semantics.
- Use Copilot to propose one incremental behavior-preserving refactor of the duplicated validation logic.
Explanation
Correct Answer
A:Generated processing is blocking a latency-sensitive execution thread.
Incorrect Answers
B:Asking Copilot to identify the N+1 pattern and propose batching or a join while preserving result order would not meet the need for Copilot to propose an appropriate worker or asynchronous architecture without changing the endpoint response contract.
C:Asking Copilot for a scoped async conversion with unchanged HTTP codes and retry semantics would not meet the need for Copilot to propose an appropriate worker or asynchronous architecture without changing the endpoint response contract.
D:Using Copilot to propose one incremental behavior-preserving refactor of the duplicated validation logic would not meet the need for Copilot to propose an appropriate worker or asynchronous architecture without changing the endpoint response contract.
Question 431
A team has implemented the following change: Use Copilot to propose an appropriate worker or asynchronous architecture without changing the endpoint response contract. The original requirement was: A Node service performs CPU-heavy transformations on its main event loop and sees long request tail latency. Which ONE validation test best demonstrates the intended behavior?
- Load-test p95/p99 latency and verify transformed output is identical under contention.
- Run negative cases and compare endpoint contract tests with the old version.
- Compare query counts and report outputs on a realistic dataset.
- Run existing regression fixtures and compare public method results before and after.
Explanation
Correct Answer
A:Load-test p95/p99 latency and verify transformed output is identical under contention.
Incorrect Answers
B:Generated code requires independently defined acceptance tests and review against the real program contract. Verification of this result involves load-test p95/p99 latency and verify transformed output is identical under contention.
C:Compare query counts and report outputs on a realistic dataset. That check cannot demonstrate tested AI-assisted changes that preserve stated requirements.
D:Run existing regression fixtures and compare public method results before and after. That check cannot demonstrate tested AI-assisted changes that preserve stated requirements.
Question 432
During troubleshooting, investigators observe: The endpoint stalls while a synchronous transform monopolizes the event loop. The system context is: A Node service performs CPU-heavy transformations on its main event loop and sees long request tail latency. Which ONE cause most directly explains the observed failure?
- Async error propagation was lost during mechanically generated modernization.
- Generated processing is blocking a latency-sensitive execution thread.
- The code structure repeats IO in a loop instead of batching.
- A cosmetic cleanup modified a relied-upon observable behavior.
Explanation
Correct Answer
B:The remedy should therefore be: Use Copilot to propose an appropriate worker or asynchronous architecture without changing the endpoint response contract.
Incorrect Answers
A:Async error propagation was lost during mechanically generated modernization would not address the need for generated processing is blocking a latency-sensitive execution thread.
C:The code structure repeats IO in a loop would not address the need for generated processing is blocking a latency-sensitive execution thread.
D:A cosmetic cleanup modified a relied-upon observable behavior would not address the need for generated processing is blocking a latency-sensitive execution thread.
Question 433
The current design is: Use Copilot to propose an appropriate worker or asynchronous architecture without changing the endpoint response contract. The prior failure was: The endpoint stalls while a synchronous transform monopolizes the event loop. Which ONE ongoing control best protects against recurrence of that specific failure?
- Use query-count regression tests and production-size benchmarks.
- Preserve endpoint contract tests and negative async-failure cases.
- Require characterization tests around legacy behavior before generated refactors.
- Check event-loop delay and throughput after AI-suggested optimizations.
Explanation
Correct Answer
D:Generated processing is blocking a latency-sensitive execution thread. Check event-loop delay and throughput after AI-suggested optimizations.
Incorrect Answers
A:Generated code requires independently defined acceptance tests and review against the real program contract. It would leave check event-loop delay and throughput after AI-suggested optimizations without the specified safeguard.
B:Generated code requires independently defined acceptance tests and review against the real program contract. Preventing this failure involves checking event-loop delay and throughput after AI-suggested optimizations.
C:Generated code requires independently defined acceptance tests and review against the real program contract. Preventing this failure involves checking event-loop delay and throughput after AI-suggested optimizations. The observed condition is use Copilot to propose an appropriate worker or asynchronous architecture without changing the endpoint response contract. The prior failure was: The endpoint.
Question 434
A GitHub Copilot task needs TWO complementary actions: the immediate fix and a preventive practice. Context: A large pull request contains generated unit tests and a developer assumes passing CI means all behavior is correct. Observed failure: A missing authorization branch goes unnoticed because tests only check success. Select exactly TWO decisions that together address these needs.
- Use Copilot to draft integration tests against an ephemeral test database and real schema migrations.
- Use Copilot code review to help inspect edge cases, then perform independent human diff review and test-quality assessment.
- Keep independent decimal boundary fixtures to validate AI-generated tests.
- Ask Copilot to draft a small typed pagination helper using the actual client signature, then review and test it.
- Keep human code-owner approvals and meaningful negative tests on protected branches.
Explanation
Correct Answers
B:Build success and AI review are insufficient evidence of complete requirement coverage.
E:Build success and AI review are insufficient evidence of complete requirement coverage. Keep human code-owner approvals and meaningful negative tests on protected branches.
Incorrect Answers
A:Unit isolation did not validate integration across schema and data layers. Build success and AI review are insufficient evidence of complete requirement coverage.
C:If you keep independent decimal boundary fixtures to validate AI-generated tests, you still need to use Copilot code review to help inspect edge cases, then perform independent human diff review and test-quality assessment.
D:Generated code did not implement the API's cursor progression contract. Build success and AI review are insufficient evidence of complete requirement coverage.
Question 435
A team has implemented the following change: Use Copilot code review to help inspect edge cases, then perform independent human diff review and test-quality assessment. The original requirement was: A large pull request contains generated unit tests and a developer assumes passing CI means all behavior is correct. Which ONE validation test best demonstrates the intended behavior?
- Mock two pages plus a final empty token and check the combined records contain no duplicates.
- Trace at least one generated test to each changed acceptance requirement and probe one negative branch.
- Run generated tests and confirm exact decimal arithmetic outcomes and exceptions.
- Run the migration and create/read/delete workflow in CI with an isolated database.
Explanation
Correct Answer
B:Trace at least one generated test to each changed acceptance requirement and probe one negative branch.
Incorrect Answers
A:Redacting credentials and tokens prevents generated instrumentation from exposing secrets in logs or repositories. Verification of this result involves tracing at least one generated test to each changed acceptance requirement and probe one negative branch.
C:Generated code requires independently defined acceptance tests and review against the real program contract. Verification of this result involves tracing at least one generated test to each changed acceptance requirement and probe one negative branch.
D:Run the migration and create/read/delete workflow in CI with an isolated database. Verification of this result involves tracing at least one generated test to each changed acceptance requirement and probe one negative branch.
Question 436
A team reports: A Copilot Business organization stores confidential pricing algorithms under `private/pricing`, and ordinary inline suggestions must not use that folder as context. They observe: Engineers receive inline suggestions while editing an excluded confidential pricing file. Which ONE technical decision most directly corrects the cause?
- Review the current Business data protection agreement and effective organization policies rather than copying personal plan wording.
- Read the current GitHub content-exclusion support matrix for each client and independently validate effective behavior before making a universal claim.
- Configure supported organization or repository content exclusions for the sensitive path, then check the effective supported client behavior.
- Use the supported organization/enterprise policies and repository scope controls for Copilot access.
Explanation
Correct Answer
C:A required content-exclusion policy is missing, mis-scoped or ineffective on the client.
Incorrect Answers
A:Personal and managed enterprise privacy controls were conflated. A required content-exclusion policy is missing, mis-scoped or ineffective on the client.
B:Feature and exclusion support are surface- and version-dependent, with additional MCP limitations. That does not configure supported organization or repository content exclusions for the sensitive path, then check the effective.
D:The feature availability boundary does not reflect repository governance. A required content-exclusion policy is missing, mis-scoped or ineffective on the client.
Question 437
A team has implemented the following change: Configure supported organization or repository content exclusions for the sensitive path, then check the effective supported client behavior. The original requirement was: A Copilot Business organization stores confidential pricing algorithms under `private/pricing`, and ordinary inline suggestions must not use that folder as context. Which ONE validation test best demonstrates the intended behavior?
- Test one authorized and one disallowed repository under the same managed user.
- Test the relevant IDE chat mode, inline suggestions, code review, and authorized agent separately in a nonsecret repo.
- Open a sensitive file in a supported IDE and verify inline suggestions are suppressed while a permitted file still works.
- Check the tenant's actual settings and documented processing commitments before writing a privacy statement.
Explanation
Correct Answer
C:Open a sensitive file in a supported IDE and verify inline suggestions are suppressed while a permitted file still works.
Incorrect Answers
A:Generated code requires independently defined acceptance tests and review against the real program contract. That check cannot demonstrate open a sensitive file in a supported IDE and verify inline suggestions are suppressed while a permitted file still works.
B:Redacting credentials and tokens prevents generated instrumentation from exposing secrets in logs or repositories. That check cannot demonstrate open a sensitive file in a supported IDE and verify inline suggestions are suppressed while a permitted file still works.
D:AI-assisted postmortem claims need links to actual commits, logs and reproducible failures. That check cannot demonstrate open a sensitive file in a supported IDE and verify inline suggestions are suppressed while a permitted file still works.
Question 438
During troubleshooting, investigators observe: Engineers receive inline suggestions while editing an excluded confidential pricing file. The system context is: A Copilot Business organization stores confidential pricing algorithms under `private/pricing`, and ordinary inline suggestions must not use that folder as context. Which ONE cause most directly explains the observed failure?
- A required content-exclusion policy is missing, mis-scoped or ineffective on the client.
- Personal and managed enterprise privacy controls were conflated.
- The feature availability boundary does not reflect repository governance.
- Feature and exclusion support are surface- and version-dependent, with additional MCP limitations.
Explanation
Correct Answer
A:The remedy should therefore be: Configure supported organization or repository content exclusions for the sensitive path, then check the effective supported client behavior.
Incorrect Answers
B:Personal and managed enterprise privacy controls were conflated. A required content-exclusion policy is missing, mis-scoped or ineffective on the client.
C:The feature availability boundary does not reflect repository governance. A required content-exclusion policy is missing, mis-scoped or ineffective on the client.
D:Approved dependency sources and lockfiles protect builds against invented or impersonated packages. That does not establish a required content-exclusion policy is missing, mis-scoped or ineffective on the client.
Question 439
The current design is: Configure supported organization or repository content exclusions for the sensitive path, then check the effective supported client behavior. The prior failure was: Engineers receive inline suggestions while editing an excluded confidential pricing file. Which ONE ongoing control best protects against recurrence of that specific failure?
- Record the active plan, organization rules and source date in security guidance.
- Audit effective Copilot policies when new repositories are created.
- Test exclusion policies on each supported surface and recheck after repository path changes.
- Use defense in depth and revisit the live support matrix whenever workflows or clients change.
Explanation
Correct Answer
C:A required content-exclusion policy is missing, mis-scoped or ineffective on the client. Test exclusion policies on each supported surface and recheck after repository path changes.
Incorrect Answers
A:Record the active plan, organization rules and source date in security guidance. It would leave tested AI-assisted changes that preserve stated requirements without the specified safeguard.
B:Generated code requires independently defined acceptance tests and review against the real program contract. Preventing this failure involves testing exclusion policies on each supported surface and recheck after repository path changes.
D:Use defense in depth and revisit the live support matrix whenever workflows or clients change. It would leave tested AI-assisted changes that preserve stated requirements without the specified safeguard.
Question 440
A team reports: A company excludes a sensitive repository from Copilot suggestions but an engineer assumes this makes it safe to paste its code directly into a chat prompt. They observe: Protected algorithm source is manually pasted into a chat message despite repository exclusions. Which ONE technical decision most directly corrects the cause?
- Explain the expected inline-suggestion suppression for excluded paths and verify the policy's intended scope.
- Do not submit excluded content explicitly; follow confidentiality policy and treat user-provided prompts as a separate disclosure decision.
- Configure supported organization or repository content exclusions for the sensitive path, then check the effective supported client behavior.
- Treat public-code matching filters as an additional safeguard rather than comprehensive provenance or security approval.
Explanation
Correct Answer
B:Content-exclusion configuration is not authorization to reveal sensitive data through every channel.
Incorrect Answers
A:Explaining the expected inline-suggestion suppression for excluded paths and verifying the policy's intended scope would not address the need for do not submit excluded content explicitly.
C:A required content-exclusion policy is missing, mis-scoped or ineffective on the client. That does not establish do not submit excluded content explicitly; follow confidentiality policy and treat user-provided prompts as a separate.
D:Treat public-code matching filters as an additional safeguard rather than comprehensive provenance or security approval would not address the need for do not submit excluded content explicitly.
GitHub Copilot (GH-300) Practice Tests