Question
Which of the following secret scanning features can verify whether a secret is still active?
- A. branch protection
- B. validity checks Correct
- C. push protection
- D. custom patterns
Explanation
Validity checks query the relevant provider to determine whether a detected token is still active and, when possible, whether it was ever active. Push protection blocks supported secrets before they are pushed but does not test whether they work. Custom patterns only define additional formats to detect, and branch protection governs changes to branches rather than being a secret scanning feature.
