How many rollout phases are described for GHAS in the material?

• A. Four phases
• B. Three phases
• C. Five phases
• D. Six phases

Answer: (A)

Understanding how GHAS is rolled out in four phases helps you see how security tooling scales in an organization. The four-stage model starts with a pilot or private preview, where a small group tests the integration, collects feedback, and confirms that workflows for detection and remediation fit with existing processes. Next comes a broader but still controlled rollout, giving more teams access to GHAS to validate performance, refine policies, and ensure alerting and remediation hooks work across different projects. After that, GHAS reaches general availability, making the features available organization-wide with standard governance, policy enforcement, and reporting. The final phase focuses on expansion and optimization, scaling usage to all repositories, automating remediation, and maturing the security program with ongoing improvements and metrics. This four-stage sequence matches the material’s description, balancing risk, feedback, and growth as GHAS adoption widens. If you see options with fewer or more phases, they don’t align with the described progression.