[2025] Use Valid New GH-100 Test Notes & GH-100 Valid Exam Guide
GH-100 Actual Questions Answers PDF 100% Cover Real Exam Questions
Microsoft GH-100 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
NEW QUESTION # 29
Which GitHub feature is responsible for tracking dependencies and known vulnerabilities in those dependencies from an advisory database?
- A. Repository Insights
- B. CodeQL
- C. Security Policy
- D. Dependency Graph
Answer: D
Explanation:
The Dependency Graph continuously analyzes your repository's manifest and lock files to build an inventory of direct and transitive dependencies and flags any that match entries in the GitHub Advisory Database, surfacing known vulnerabilities.
NEW QUESTION # 30
Which feature is unique to self-hosted runners?
- A. Dynamic scaling
- B. Automatic updates to the operating system
- C. Execute scripts before and after a job
- D. GPU support
Answer: C
Explanation:
Self-hosted runners support custom pre- and post-job scripts via runner hooks, letting you run arbitrary scripts before a job starts and after it finishes - capabilities not available on GitHub-hosted runners.
NEW QUESTION # 31
When comparing Group SCIM to Team Sync for identity management in GitHub Enterprise, which statement is Correct?
- A. Group SCIM requires less initial configuration than Team Sync.
- B. Group SCIM enables centralized user and group management through the IdP.
- C. Team Sync supports more identity providers than Group SCIM.
- D. Team Sync provides more automated user deprovisioning than Group SCIM.
Answer: B
Explanation:
GroupSCIM lets you manage both user accounts and group memberships centrally in your identity provider - automatically provisioning, updating, and deprovisioning users and groups in GitHub - whereas TeamSync only mirrors IdP group membership into existing GitHub teams.
NEW QUESTION # 32
What distinguishes Enterprise Managed Users (EMUs) from standard GitHub accounts?
- A. EMUs can only be created using email invites
- B. EMUs are only available for GitHub Enterprise Server
- C. EMUs are managed in GitHub and use GitHub authentication
- D. EMUs are fully controlled by an IdP and cannot log in with personal credentials
Answer: D
Explanation:
EMU accounts are provisioned and authenticated exclusively through your identity provider - users sign in via the IdP and cannot use or manage GitHub-native credentials.
NEW QUESTION # 33
Which of the following is a key benefit of setting default read permissions across organizations?
- A. Suits environments where all users need write access.
- B. Increases efficiency in content creation and updates.
- C. Improves collaboration by allowing users to modify content directly.
- D. Enhances security by minimizing unintended modifications.
Answer: D
Explanation:
Enforcing a default of Read for organization members ensures they can view content without the ability to push changes, reducing the risk of accidental or unauthorized modifications.
NEW QUESTION # 34
Why would someone choose to configure a security policy?
- A. To communicate corporate security and compliance policies for end users on a private repository.
- B. To define which open source packages are permitted for use as part of that repository.
- C. To provide information on an open source repository for open source collaborators and researchers that may need to report and disclose sensitive security findings to maintainers securely.
- D. To prevent anyone from pushing to the repository without approval.
Answer: C
Explanation:
A security policy (the SECURITY.md file) lets maintainers of an open source repository provide clear, private instructions for collaborators and external researchers on how to report and disclose security vulnerabilities responsibly.
NEW QUESTION # 35
When comparing a partner identity provider integration with a non-partner identity management solution for GitHub Enterprise Managed Users, which statement is Correct?
- A. The non-partner identity provider integrations can utilize OIDC for authentication.
- B. The non-partner identity provider integrations require manual configuration of SAML 2.0 details.
- C. The partner identity provider integrations support fewer GitHub-supported authentication methods.
- D. The partner identity provider integrations rely on the partner to support the application on the partner IdP.
Answer: B
Explanation:
Non-partner identity provider integrations require you to enter SAML2.0 configuration details by hand - such as the Sign-on URL, Issuer, and X.509 certificate - whereas partner IdPs supply a pre-configured application integration.
NEW QUESTION # 36
A team member is unable to push to a repository due to a 403-error related to branch protection. What should the GitHub Enterprise administrator do first?
- A. Raise a GitHub Support request for permissions issues
- B. Check the user's permissions and rulesets applied to the branch
- C. Remove the user from the team and re-add them
- D. Revert the branch to an earlier state
Answer: B
Explanation:
The administrator should first review the user's repository role and the branch protection rules applied to that branch. A 403 error on push almost always indicates that the user either lacks the necessary write permissions or is not listed among the actors authorized by the branch protection settings.
NEW QUESTION # 37
What additional capability does secret scanning offer for private repositories on GitHub Enterprise Cloud?
- A. Rewrites history to remove secrets.
- B. Allows custom pattern definitions for internal secret formats.
- C. Disables any code that contains a secret.
- D. Revokes GitHub access tokens automatically.
Answer: B
Explanation:
Secret scanning in private repositories on GitHub Enterprise Cloud lets you define and use custom regular-expression patterns - so you can detect internal or proprietary secret formats beyond the default partner-provided types.
NEW QUESTION # 38
When a user becomes a member of multiple GitHub organizations, which THREE of the following are important considerations for administrators? (Choose three.)
- A. The user's personal repositories will become accessible to all organizations.
- B. The user's repository access and/or team membership needs to be managed separately for each organization.
- C. The user's profile information becomes private to non-organization members.
- D. The user will need to authorize credentials separately for each SAML-enabled organization.
- E. The user will have different permission levels in each organization.
- F. The user will automatically have the same role across all organizations.
Answer: B,D,E
Explanation:
A user's repository access and team memberships are scoped to each organization, so admins must configure permissions separately per org.
When an organization enforces SAML SSO, each member must authorize their personal access tokens or SSH keys for that org, requiring separate approval for each SAML-enabled organization Roles and permission levels (owner, member, billing manager, repository roles, etc.) are assigned on a per-organization basis, so a user often has different permissions in different organizations.
NEW QUESTION # 39
What benefit does GitHub Advanced Security provide?
- A. helps enterprise administrators improve and maintain network security for their GitHub Enterprise Server instances
- B. helps organization administrators manage security tokens
- C. helps organization administrators analyze and configure permissions to the least privilege required
- D. helps developers improve and maintain the security and quality of code
Answer: D
Explanation:
GitHub Advanced Security equips developers with built-in code scanning (CodeQL), secret scanning, dependency review, and other AppSec tools - helping them find, fix, and prevent security vulnerabilities while maintaining code quality.
NEW QUESTION # 40
What is the key benefit of using a GitHub security advisory within a repository?
- A. It allows maintainers to privately disclose, discuss, and publish vulnerabilities.
- B. It flags all forks of the repository as vulnerable.
- C. It automatically reverts commits that introduced the vulnerability.
- D. It prevents users from cloning the repository until issues are resolved.
Answer: A
Explanation:
GitHub security advisories let maintainers privately disclose, discuss fixes, and then publish vulnerabilities in a controlled manner within the repository.
NEW QUESTION # 41
How does metered billing work in GitHub Enterprise Cloud with Enterprise Managed Users (EMU)?
- A. Billing is based on number of total users in the enterprise
- B. Billing is based on total users in the enterprise that are not dormant
- C. Billing is based on the number of users created in Azure AD
- D. Billing is based on owners and members of GitHub organizations
Answer: A
Explanation:
Billing for GitHub Enterprise Cloud under metered (usage-based) billing is calculated by the total number of Enterprise Managed Users (and other license-consuming accounts) in your enterprise - each EMU consumes a seat and contributes to the monthly bill.
NEW QUESTION # 42
How does GitHub support compliance requirements for enterprises?
- A. GitHub automatically encrypts user passwords in plaintext for quick access.
- B. GitHub disables all external collaboration features.
- C. GitHub provides configurable controls such as an audit log, SAML authentication, and enterprise rulesets.
- D. GitHub only allows those with repository owner (admin) permissions to write changes to repositories.
Answer: C
Explanation:
GitHub Enterprise gives you a suite of configurable controls - like a comprehensive audit log, enforced SAML single sign-on, and enterprise-level rulesets - that you can tailor and enforce to meet your organization's compliance mandates.
NEW QUESTION # 43
Which of the following is a key benefit of using GitHub Marketplace Apps in an enterprise?
- A. They guarantee no downtime during enterprise GitHub maintenance windows
- B. They often include integrations with external services, reducing the need for custom code
- C. All apps come pre-approved by GitHub's internal security team
- D. Apps eliminate the need for GitHub Actions entirely
Answer: B
Explanation:
GitHub Marketplace Apps come with built-in integrations to external services - so you can plug in things like CI servers, code-quality scanners, or deployment tools without writing and maintaining custom connectors.
NEW QUESTION # 44
Which of the following is the responsibility of a Team Maintainer in a GitHub organization? (Choose two.)
- A. Managing nested sub-teams.
- B. Modifying organization-wide settings.
- C. Deleting repositories assigned to the team.
- D. Adding or removing team members.
Answer: A,D
Explanation:
Team maintainers can manage nested sub-teams - requesting to add or change parent/child teams within the organization's hierarchy.
Team maintainers have permission to add and remove members from their team, controlling day-to-day team membership.
NEW QUESTION # 45
What needs to be done to ensure that only specific repositories can access the runners in an organization runner group?
- A. Configure the Actions Policies to "Only selected repositories".
- B. Add a label to the runner group.
- C. Configure repository access in the runner group settings.
- D. Use GitHub's meta API to configure access.
Answer: C
Explanation:
In the organization's runner group settings, switch the access from "All repositories" to "Selected repositories" and then explicitly choose which repos may use those runners.
NEW QUESTION # 46
Which of the following are valid ways to pass data to a reusable workflow in a separate repository?
- A. Define the secrets in the reusable workflow's repository and reference the secret using the 'secrets' context.
- B. Define inputs in the reusable workflow and pass values from the calling workflow.
- C. Define the secrets in the caller repository and call the reusable workflow using the 'secrets' keyword.
- D. Use environment variables to pass data directly to the reusable workflow.
Answer: B,C
Explanation:
You declare namedinputs in the reusable workflow's on.workflow_call block and then pass values from the caller using thewithkeyword, allowing the called workflow to consume those parameters.
You define required secrets in the caller repository and supply them to the reusable workflow via thesecretskeyword in the workflow-call step, ensuring sensitive values are securely passed.
NEW QUESTION # 47
......
GH-100 Exam questions and answers: https://www.prep4away.com/Microsoft-certification/braindumps.GH-100.ete.file.html
Pass GH-100 Exam Info and Free Practice Test: https://drive.google.com/open?id=1pkFBKDK9zBrB5-j_8yuDQsgx0IK1jpU_