nerdexam
Microsoft

GH-200 · Question #9

As a developer, you are configuring GitHub Actions to deploy VMs to production. A member of the VMOps team must provide approval before the deployment occurs. Which of the following steps should you…

The correct answer is C. Navigate to the repository settings and create a Production environment with the VMOps team as. To require VMOps team approval before a production deployment, you need two things: (1) Navigate to the repository settings (not organization settings) and create an environment named 'Production,' adding the VMOps team as required reviewers under the environment's protection…

Implement security for GitHub Actions

Question

As a developer, you are configuring GitHub Actions to deploy VMs to production. A member of the VMOps team must provide approval before the deployment occurs. Which of the following steps should you take? (Each correct answer presents part of the solution. Choose two.)

Options

  • ANavigate to the organization settings and create a Production environment with the VMOps team
  • BSpecify the environment named Production in the workflow jobs that deploy to the VMs.
  • CNavigate to the repository settings and create a Production environment with the VMOps team as
  • DAdd the VMs to the environment.
  • ESpecify the VMOps team as the owner of the environment.

How the community answered

(46 responses)
  • A
    11% (5)
  • B
    2% (1)
  • C
    78% (36)
  • D
    2% (1)
  • E
    7% (3)

Explanation

To require VMOps team approval before a production deployment, you need two things: (1) Navigate to the repository settings (not organization settings) and create an environment named 'Production,' adding the VMOps team as required reviewers under the environment's protection rules - this is option C. (2) Specify 'environment: Production' in the workflow jobs that perform the VM deployments - this is option B - so GitHub knows to enforce the environment's protection rules and pause for approval before executing those jobs. Options A, D, and E describe incorrect locations or unsupported configurations.

Topics

#GitHub Actions#Environments#Deployment Protection Rules#Required Approvals

Community Discussion

No community discussion yet for this question.

Full GH-200 Practice