Question
Assuming security and analysis features are not configured at the repository, organization, or enterprise level, secret scanning is enabled on:
- A. private repositories.
- B. all new repositories within your organization.
- C. public repositories. Correct
- D. user-owned private repositories.
Explanation
Secret scanning is enabled by default on public repositories, with no configuration needed. On private repositories it must be enabled manually and requires GitHub Advanced Security, which rules out private and user-owned private repositories. New repositories in an organization only get it automatically if someone has configured that at the organization level, which the question excludes.