GH-100 Exam Questions

Which events from the audit log are exposed by the GraphQL API? Each answer presents a complete solution. (Choose three.)

When a token is used to perform actions across different GitHub resources, how is this reflected in audit logs?

Which practice helps avoid service disruption when consuming GitHub APIs at scale?

How does GitHub handle secrets found via secret scanning in a public repository?

Our organization is updating its enterprise policies. Which of the following steps should you take to ensure alignment with security requirements?

Which of the following correctly describes the difference between controlling actions at the enterprise level versus the organization level in GitHub?

What is the potential consequence of enabling multiple rulesets that apply to the same branch in a repository?

In a GitHub repository using Dependabot, which of the following best describes the purpose of the .github/dependabot.yml file?

What is the key benefit of using a GitHub security advisory within a repository?

How does GitHub support compliance requirements for enterprises?

You discover that a secret (e.g., a token or password) was accidentally committed to a GitHub repository. What is the first step you should take to mitigate the risk?

Why would someone choose to configure a security policy?

How is CodeQL different from other static analysis tools? A It removes insecure code automatically

Your enterprise has multiple organizations, and you want to ensure consistent security policies across all teams. Which feature should you use?

What benefit does GitHub Advanced Security provide?

Which Git operation is not included in the Git activity audit log?

You are an administrator and need to enforce a policy on forking private and internal repositories. Which options are available for configuring the policy at the enterprise level?...

What additional capability does secret scanning offer for private repositories on GitHub Enterprise Cloud?

What is the first step when sensitive data is accidentally pushed to a public GitHub repository?

How does Dependabot determine which security update PRs to open?

Which of the following GitHub token types supports fine-grained repository permissions AND is recommended for CI/CD automation?

Which of the following accurately contrasts a GitHub App and a GitHub Action?

Which product's usage is not included in GitHub Enterprise Cloud's monthly metered billing report?

You have subscribed to GitHub Premium Support, and you need to submit a support ticket. GitHub Premium Support can help you with:

You need to contact GitHub Premium Support. What are valid reasons for submitting a support ticket? (Each answer presents a complete solution. Choose two.)

Which of the following is a key benefit of using GitHub Marketplace Apps in an enterprise?

You need to create a support bundle for your GitHub Enterprise Server instance with the hostname ghe.avocado.corp. What command should you use to create a support bundle?

What do you need to successfully generate a support bundle on a GitHub Enterprise Server?

A financial services company is evaluating GitHub account types. Which of the following is a key distinction between GitHub Enterprise Managed Users and Personal Accounts?

Which THREE of the following accurately describe how the SCIM protocol enhances user management in GitHub Enterprise Cloud? (Choose three.)

When comparing a partner identity provider integration with a non-partner identity management solution for GitHub Enterprise Managed Users, which statement is Correct?

When comparing Group SCIM to Team Sync for identity management in GitHub Enterprise, which statement is Correct?

Why is a GitHub App preferred over a PAT for machine authentication?

You are planning GitHub account management for a healthcare organization with strict compliance requirements. Which THREE of the following statements accurately describe GitHub Ent...

A GitHub Enterprise administrator is planning to implement SAML SSO across their company. Which of the following correctly distinguishes enterprise-wide SAML SSO from organization-...

What distinguishes Enterprise Managed Users (EMUs) from standard GitHub accounts?

Why would a GitHub App be favored over a machine account for automation tasks?

When comparing fine-grained Personal Access Tokens (PATs) with classic PATs, which of the following statements is accurate?

What is the new capability of GitHub's billing dashboard?

What is a key characteristic of GitHub Enterprise Server (GHES) compared to GitHub Enterprise Cloud (GHEC)?

Your organization wants to reduce costs. Which of the following actions should you take?

How does metered billing work in GitHub Enterprise Cloud with Enterprise Managed Users (EMU)?

A team member is unable to push to a repository due to a 403-error related to branch protection. What should the GitHub Enterprise administrator do first?

Which of the following is true about outside collaborators in a GitHub organization?

Which of the following is a benefit of creating a new GitHub organization?

Which of the following are valid ways to pass data to a reusable workflow in a separate repository?

An organization wants to share a single API key required for their Actions workflows. They need to restrict its use to only a subset of repositories. Where should they configure th...

Which feature is unique to self-hosted runners?

What is the effect of enforcing a policy that restricts GitHub Actions to only those created by the enterprise?

You want to ensure a secret is automatically available to only workflows in internal and private repositories in the organization. Where do you configure the required access policy...