Sample Questions of GH-100 Dumps With 100% Exam Passing Guarantee
Pass Key features of GH-100 Course with Updated 67 Questions
NEW QUESTION # 22
A financial services company is evaluating GitHub account types. Which of the following is a key distinction between GitHub Enterprise Managed Users and Personal Accounts?
- A. Enterprise Managed Users can collaborate across both personal and enterprise repositories.
- B. Personal Accounts are owned by users and can be used for both personal and professional work.
- C. Personal Accounts provide stricter control over repositories and user activity.
- D. Enterprise Managed Users require the organization to manage their own authentication server.
Answer: B
Explanation:
Personal Accounts are owned and controlled by individual users and can serve both their personal projects and professional work, whereas Enterprise Managed Users exist solely within the enterprise context and cannot be used for personal repositories.
NEW QUESTION # 23
When comparing a partner identity provider integration with a non-partner identity management solution for GitHub Enterprise Managed Users, which statement is Correct?
- A. The non-partner identity provider integrations require manual configuration of SAML 2.0 details.
- B. The non-partner identity provider integrations can utilize OIDC for authentication.
- C. The partner identity provider integrations support fewer GitHub-supported authentication methods.
- D. The partner identity provider integrations rely on the partner to support the application on the partner IdP.
Answer: A
Explanation:
Non-partner identity provider integrations require you to enter SAML2.0 configuration details by hand - such as the Sign-on URL, Issuer, and X.509 certificate - whereas partner IdPs supply a pre-configured application integration.
NEW QUESTION # 24
What will happen if Dependabot discovers a vulnerable transitive dependency in a repository?
- A. It creates a pull request to update the direct dependency to a version that resolves the vulnerability.
- B. It automatically removes the package from the repository.
- C. It sends an email to the repository owner but does not alter code.
- D. It opens a pull request to update the affected package directly, regardless of version compatibility.
Answer: A
Explanation:
Dependabot will automatically open a pull request that updates the direct dependency to a version which, in turn, resolves (or removes) the vulnerable transitive dependency-ensuring the fix is applied via your declared dependencies.
NEW QUESTION # 25
What do you need to successfully generate a support bundle on a GitHub Enterprise Server?
- A. Administrator SSH access to the appliance
- B. Approval from GitHub Support
- C. A GitHub App with read:org permissions
- D. A custom GitHub Action in the root repo
Answer: A
Explanation:
You must have administrator-level SSH access to the GitHub Enterprise Server appliance so you can run the ghe-support-bundle command over SSH and capture the bundle locally.
NEW QUESTION # 26
An organization wants to share a single API key required for their Actions workflows. They need to restrict its use to only a subset of repositories. Where should they configure the secrets to minimize maintenance?
- A. Environment secrets
- B. Organization secrets
- C. Development environment secrets
- D. Repository secrets
Answer: B
Explanation:
By defining the API key as an organization secret, you centralize management and can grant access only to the subset of repositories you choose - eliminating per-repo duplication while enforcing the desired scope.
NEW QUESTION # 27
Which of the following is the responsibility of an Organization Owner in GitHub? (Choose three.)
- A. Create repositories without approval from other members.
- B. View and manage organization billing information.
- C. Manage organization settings, such as configuration and default permissions.
- D. Access repositories only if explicitly granted by a team maintainer.
Answer: A,B,C
Explanation:
Organization owners can view and edit billing information for the organization.
Organization owners may create new repositories in the organization without needing approval from other members.
Organization owners have full administrative control over organization settings, including configuring default repository permissions.
NEW QUESTION # 28
How does GitHub support compliance requirements for enterprises?
- A. GitHub provides configurable controls such as an audit log, SAML authentication, and enterprise rulesets.
- B. GitHub only allows those with repository owner (admin) permissions to write changes to repositories.
- C. GitHub disables all external collaboration features.
- D. GitHub automatically encrypts user passwords in plaintext for quick access.
Answer: A
Explanation:
GitHub Enterprise gives you a suite of configurable controls - like a comprehensive audit log, enforced SAML single sign-on, and enterprise-level rulesets - that you can tailor and enforce to meet your organization's compliance mandates.
NEW QUESTION # 29
Which of the following actions can a user with Write permissions perform in a GitHub repository?
- A. Delete the repository.
- B. Push code to non-protected branches.
- C. Configure branch protection rules.
- D. Manage repository settings, such as labels and GitHub Pages.
Answer: B
Explanation:
Users granted Write permission can push commits to non-protected branches, allowing them to update code without needing administrative rights.
NEW QUESTION # 30
Which of the following accurately contrasts a GitHub App and a GitHub Action?
- A. GitHub Actions are limited to reading repository content only
- B. GitHub Apps run only on GitHub-provided virtual machines, while GitHub Actions run only on customer-hosted machines
- C. GitHub Apps can only be used inside .github/workflows
- D. GitHub Actions can only be used to respond to events within a single repository while GitHub Apps can respond to events from multiple repositories
Answer: D
Explanation:
GitHub Actions workflows are defined and triggered within a single repository's context, whereas GitHub Apps are installed at the organization or user level and can subscribe to events across multiple repositories.
NEW QUESTION # 31
You are an administrator and need to enforce a policy on forking private and internal repositories. Which options are available for configuring the policy at the enterprise level? (Each answer presents a complete solution. Choose three.)
- A. Disallow repository owners from administering the setting at the repository level.
- B. Disallow forking of private and internal repositories.
- C. Allow specific people or teams to fork private and internal repositories.
- D. Allow people who have access to private and internal repositories to fork these repositories.
- E. Allow organization owners to administer the setting at the organization level.
Answer: B,D,E
Explanation:
You can configure the enterprise policy toallow organization owners to administer the forking setting at the organization level, giving them control over how repos fork within their orgs.
You can choose toallow any user who already has access to a private or internal repo to fork it.
You can also set the policy tonever allow forkingof private or internal repositories across all organizations.
NEW QUESTION # 32
Our organization is updating its enterprise policies. Which of the following steps should you take to ensure alignment with security requirements?
- A. Maintain clear documentation of existing policies and policy changes.
- B. Implement the new enterprise policies across the organization first and then consult with the security team to identify- any necessary adjustments or retrofits
- C. Implement changes without consulting stakeholders.
- D. Regularly assess and adjust policies based on evolving risks.
Answer: A,B
NEW QUESTION # 33
Which of the following accurately contrasts a GitHub App and a GitHub Action?
- A. GitHub Actions are limited to reading repository content only
- B. GitHub Apps run only on GitHub-provided virtual machines, while GitHub Actions run only on customer-hosted machines
- C. GitHub Apps can only be used inside .github/workflows
- D. GitHub Actions can only be used to respond to events within a single repository while GitHub Apps can respond to events from multiple repositories
Answer: D
Explanation:
GitHub Actions workflows are defined and triggered within a single repository's context, whereas GitHub Apps are installed at the organization or user level and can subscribe to events across multiple repositories.
NEW QUESTION # 34
When a token is used to perform actions across different GitHub resources, how is this reflected in audit logs?
- A. Only the first repository accessed is recorded
- B. Each API action made with the token generates a separate audit log entry
- C. GitHub creates a ZIP archive of all token activity
- D. The audit log stores only the token name and not its actions
Answer: B
Explanation:
Each API call authenticated with a token generates its own audit-log event, so you'll see a distinct entry for every action performed across different resources, each annotated with the token's hashed ID, actor, and source IP.
NEW QUESTION # 35
Your organization wants to reduce costs. Which of the following actions should you take?
- A. Remove all outside collaborators
- B. Grant all users admin permissions
- C. Regularly audit for inactive users
- D. Disable SAML SSO for members
Answer: C
Explanation:
Regularly auditing for inactive (dormant) users lets you suspend or remove accounts that aren't consuming seats - freeing up licenses and directly lowering your per-user subscription costs.
NEW QUESTION # 36
In a GitHub repository using Dependabot, which of the following best describes the purpose of the .github/dependabot.yml file?
- A. It lists commit SHAs to exclude from automatic pull requests.
- B. It encrypts dependency versions before storing them in the repo.
- C. It configures scheduling, package ecosystems, and target directories for update checks.
- D. It enables GitHub to scan for secrets in dependency files.
Answer: C
Explanation:
The .github/dependabot.yml file defines Dependabot's package-ecosystem, the directories to inspect, and the update schedule (daily/weekly/monthly), controlling when and where Dependabot checks for new versions.
NEW QUESTION # 37
You need to contact GitHub Premium Support. What are valid reasons for submitting a support ticket? (Each answer presents a complete solution. Choose two.)
- A. business impact from security issues within your organization
- B. license renewal
- C. hardware setup issues or errors
- D. outages on GitHub.com affecting core Git functionality
Answer: A,D
Explanation:
Business-impact security issues (for example, a critical vulnerability affecting your organization) are classified as High-priority tickets and are covered under your Premium Support SLA.
Outages on GitHub.com that disrupt core Git or web application functionality trigger Urgent-priority responses under Premium Support's SLA.
NEW QUESTION # 38
Why would someone choose to configure a security policy?
- A. To define which open source packages are permitted for use as part of that repository.
- B. To prevent anyone from pushing to the repository without approval.
- C. To communicate corporate security and compliance policies for end users on a private repository.
- D. To provide information on an open source repository for open source collaborators and researchers that may need to report and disclose sensitive security findings to maintainers securely.
Answer: D
Explanation:
A security policy (the SECURITY.md file) lets maintainers of an open source repository provide clear, private instructions for collaborators and external researchers on how to report and disclose security vulnerabilities responsibly.
NEW QUESTION # 39
What distinguishes Enterprise Managed Users (EMUs) from standard GitHub accounts?
- A. EMUs are fully controlled by an IdP and cannot log in with personal credentials
- B. EMUs are managed in GitHub and use GitHub authentication
- C. EMUs are only available for GitHub Enterprise Server
- D. EMUs can only be created using email invites
Answer: A
Explanation:
EMU accounts are provisioned and authenticated exclusively through your identity provider - users sign in via the IdP and cannot use or manage GitHub-native credentials.
NEW QUESTION # 40
You want to ensure a secret is automatically available to only workflows in internal and private repositories in the organization. Where do you configure the required access policy?
- A. Rulesets
- B. Organization secret
- C. Runner groups
- D. Actions policies
Answer: B
Explanation:
You set the access policy on the Organization Secret itself - configuring its visibility so it's scoped automatically to only internal and private repositories.
NEW QUESTION # 41
You need to create a support bundle for your GitHub Enterprise Server instance with the hostname ghe.avocado.corp. What command should you use to create a support bundle?
- A. curl -u admin https://ghe.avocado.corp/diagnostics/support-bundle.tgz -o
- B. ssh -p 122 [email protected] -- 'ghe-support-bundle -o' > support-bundle.tgz
- C. ssh -p 122 [email protected] - 'ghe-diagnostics' > support-bundle.tgz
- D. ssh -p 122 [email protected] -- 'ghe-config generate-support-bundle' > support-bundle.tgz
Answer: B
Explanation:
Run the ghe-support-bundle command over SSH on your appliance and redirect its output to a file. For example:
ssh -p 122 [email protected] -- 'ghe-support-bundle -o' > support-bundle.tgz This invokes the built-in support-bundle utility on your GitHub Enterprise Server instance and captures the resulting archive locally.
NEW QUESTION # 42
Which practice helps avoid service disruption when consuming GitHub APIs at scale?
- A. Designing your application to work within GitHub's rate limits
- B. Ignoring secondary rate limits
- C. Using multiple tokens to bypass limits
- D. Caching all API responses permanently
Answer: A
Explanation:
Designing your integration to stay within GitHub's documented rate limits-by batching requests, using conditional requests, handling 429 responses with back-off, and monitoring the X-RateLimit-* headers - ensures you won't be temporarily throttled or cut off when you hit secondary limits.
NEW QUESTION # 43
......
Microsoft GH-100 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
GH-100 Sample Practice Exam Questions 2026 Updated Verified: https://tesking.pass4cram.com/GH-100-dumps-torrent.html