GH-200 Question #25: Real Exam Question with Answer & Explanation

Question

As a developer, you need to make sure that only actions from trusted sources are available for use in your GitHub Enterprise Cloud organization. Which of the following statements are true? (Each correct answer presents a complete solution. Choose three.)

Options

• AActions can be published to an internal marketplace.
• BGitHub-verified actions can be collectively enabled for use in the enterprise.
• CSpecific actions can individually be enabled for the organization, including version information.
• DActions can be restricted to only those available in the enterprise.
• EIndividual third-party actions enabled with a specific tag will prevent updated versions of the action
• FActions created by GitHub are automatically enabled and cannot be disabled.

Explanation

{"question_number": 6, "explanation": "In GitHub Enterprise Cloud, organizations can control action availability in three ways that satisfy this requirement: (A) Publishing to an internal marketplace lets teams share curated actions only within the enterprise; (B) GitHub-verified actions can be collectively enabled as a trusted group; (C) Individual actions, including pinned versions, can be explicitly allowed. Option D is partially true but overly restrictive in practice. Option E is false-pinning a tag does not block newer versions from being used in other workflows. Option F is false-GitHub-owned actions can be disabled by enterprise admins.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.