Skip to main content

GH-100 Real Exam Questions

GitHub Administration

77 questions available · Page 1 of 8

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

Which of the following accurately contrasts a GitHub App and a GitHub Action?

  1. A

    GitHub Apps can only be used inside .github/workflows

  2. B

    GitHub Actions are limited to reading repository content only

  3. C

    GitHub Apps run only on GitHub-provided virtual machines, while GitHub Actions run only on customer-hosted machines

  4. D

    GitHub Actions can only be used to respond to events within a single repository while GitHub Apps can respond to events from multiple repositories

Show answer and explanation

Correct answer: D

Explanation

GitHub Actions workflows are defined and triggered within a single repository's context, whereas GitHub Apps are installed at the organization or user level and can subscribe to events across multiple repositories.

Question 2 Single choice

What is a recommended practice to reduce exposure risk of secrets in GitHub Actions workflows?

  1. A

    Store all secrets directly in YAML files for transparency.

  2. B

    Use encrypted organization or environment secrets and reference them by name.

  3. C

    Pass secrets via unencrypted environment variables.

  4. D

    Disable all workflow logging.

Show answer and explanation

Correct answer: B

Explanation

Secrets should be securely stored in GitHub's encrypted secrets store (organization, repository, or environment scope) and referenced by name. They are masked in logs and never exposed in plaintext.

Question 3 Single choice

What distinguishes Enterprise Managed Users (EMUs) from standard GitHub accounts?

  1. A

    EMUs are fully controlled by an IdP and cannot log in with personal credentials

  2. B

    EMUs can only be created using email invites

  3. C

    EMUs are managed in GitHub and use GitHub authentication

  4. D

    EMUs are only available for GitHub Enterprise Server

Show answer and explanation

Correct answer: A

Explanation

EMU accounts are provisioned and authenticated exclusively through your identity provider - users sign in via the IdP and cannot use or manage GitHub-native credentials.

Question 4 Single choice

You are using GitHub-hosted runners and need to securely deploy to an internal system. The security team requires that these runners use IP address ranges that would not be shared with other companies.

Which of the following approaches would meet their requirements?

  1. A

    GitHub-hosted larger runners with Azure private networking

  2. B

    GitHub-hosted standard runners, using the IP addresses provided in "actions" from https://api.github.com/meta

  3. C

    GitHub-hosted standard runners, using the IP addresses provided in "api" from https://api.github.com/ meta

  4. D

    GitHub-hosted larger runners with static IP addresses

Show answer and explanation

Correct answer: D

Explanation

GitHub's larger runners let you reserve dedicated static IP addresses for your workflows - so you can allow-list those IPs in your firewall and be sure they aren't shared with any other tenant.

Question 5 Single choice

What will happen if Dependabot discovers a vulnerable transitive dependency in a repository?

  1. A

    It creates a pull request to update the direct dependency to a version that resolves the vulnerability.

  2. B

    It opens a pull request to update the affected package directly, regardless of version compatibility.

  3. C

    It automatically removes the package from the repository.

  4. D

    It sends an email to the repository owner but does not alter code.

Show answer and explanation

Correct answer: A

Explanation

Dependabot will automatically open a pull request that updates the direct dependency to a version which, in turn, resolves (or removes) the vulnerable transitive dependency--ensuring the fix is applied via your declared dependencies.

Question 6 Single choice

What is the key benefit of using a GitHub security advisory within a repository?

  1. A

    It automatically reverts commits that introduced the vulnerability.

  2. B

    It allows maintainers to privately disclose, discuss, and publish vulnerabilities.

  3. C

    It flags all forks of the repository as vulnerable.

  4. D

    It prevents users from cloning the repository until issues are resolved.

Show answer and explanation

Correct answer: B

Explanation

GitHub security advisories let maintainers privately disclose, discuss fixes, and then publish vulnerabilities in a controlled manner within the repository.

Question 7 Multiple choice

You are planning GitHub account management for a healthcare organization with strict compliance requirements.

Which THREE of the following statements accurately describe GitHub Enterprise Managed Users (EMU) accounts? (Choose three.)

  1. A

    EMU accounts can be used for both personal and enterprise repositories.

  2. B

    EMU accounts are managed through an identity provider such as Azure AD.

  3. C

    EMU accountsallow users to create and manage their own credentials.

  4. D

    EMU accounts restrict users to enterprise-related activities only

  5. E

    EMU accounts are created and managed by individual users.

  6. F

    EMU accounts are owned by the organization and cannot be unlinked.

Show answer and explanation

Correct answers: B, D, F

Explanation

Enterprise Managed User accounts are provisioned and authenticated exclusively through your identity provider (for example, Azure AD), so the IdP handles their creation, attribute updates, and deprovisioning.

Managed user accounts cannot create public content or interact with repositories outside your enterprise;
they' re confined to private and internal repos within the enterprise.

EMU accounts are owned and controlled by the enterprise (via the IdP) and cannot be converted into or unlinked as personal accounts outside that enterprise.

Question 8 Single choice

You are managing a repository in your organization's GitHub account. A team member asks you to confirm who has access to the repository and their permission levels.

Which tool should you use to review and manage repository access?

  1. A

    GitHub Pages Settings.

  2. B

    GitHub Actions Logs.

  3. C

    Repository Settings > Manage Access.

  4. D

    Branch Protection Rules.

Show answer and explanation

Correct answer: C

Explanation

Use the Repository Settings - Manage Access page to view all users and teams with access and their assigned permission levels.

Question 9 Single choice

Which GitHub App permission type allows fine-grained control at the repository level while using short-lived tokens?

  1. A

    OAuth token

  2. B

    Classic PAT

  3. C

    Installation access token

  4. D

    Machine user token

Show answer and explanation

Correct answer: C

Explanation

GitHub App Installation Access Tokens are short-lived and scoped precisely to repositories and permissions granted to the App, following least-privilege principles ideal for automation.

Question 10 Single choice

How does GitHub handle secrets found via secret scanning in a public repository?

  1. A

    It alerts the service provider (e.g., AWS, Stripe).

  2. B

    It immediately blocks the commit to protect the secret.

  3. C

    It deletes the secret from the repository automatically.

  4. D

    It notifies the admin via webhook.

Show answer and explanation

Correct answer: A

Explanation

When secret scanning detects a supported credential in a public repository, GitHub notifies the issuing service provider so they can revoke or rotate the exposed secret.