GH-100 - Latest Training Dumps

Latest GH-100 Practice Test Questions Verified Answers As Experienced in the Actual Test!

Pass Microsoft GH-100 Exam in First Attempt Easily

Microsoft GH-100 Exam Syllabus Topics:

Topic	Details
Topic 1	Enable secure software development and ensure compliance: This section of the exam measures skills of GitHub Enterprise Administrators and deals with applying GitHub’s security and compliance capabilities. It covers policies, auditing, scrubbing sensitive data, secret scanning, code scanning with CodeQL, dependency management with Dependabot, and implementing security response plans. It also explores authentication tokens, app security policies, and enterprise managed users.
Topic 2	Manage access and permissions based on membership: This section of the exam measures skills of DevOps Engineers and reviews how to manage organizations, teams, and repository permissions. It includes default permission settings, team synchronization through AD, scripting across multiple organizations, and aligning enterprise policies with trust requirements. It also contrasts roles such as organization members, owners, collaborators, and billing managers.
Topic 3	Describe how GitHub is deployed, distributed, and licensed: This section of the exam measures skills of GitHub Enterprise Administrators and highlights the deployment models of GitHub Enterprise Server, Enterprise Cloud, and GitHub AE. It covers licensing structures, billing for seat licenses and metered services, support options, and monitoring license usage across users and machine accounts.
Topic 4	Manage GitHub Actions: This section of the exam measures skills of DevOps Engineers and emphasizes managing workflows, reusable actions, and distribution strategies within the enterprise. It explains configuring organization-level policies, managing self-hosted and GitHub-hosted runners, controlling access through IP allow lists, handling encrypted secrets, and integrating third-party vaults for workflow security.
Topic 5	Manage GitHub Packages:This section of the exam measures skills of GitHub Enterprise Administrators and focuses on managing GitHub Packages, their use in workflows, and how they differ from releases. It involves accessing, writing, and sharing packages across teams while ensuring integration into CI CD pipelines.

QUESTION 34
Which product’s usage is not included in GitHub Enterprise Cloud’s monthly metered billing report?

Git LFS bandwidth

GitHub Actions minutes

GitHub Discussions engagement

GitHub Packages storage

QUESTION 35
Which of the following are valid ways to pass data to a reusable workflow in a separate repository?

Use environment variables to pass data directly to the reusable workflow.

Define inputs in the reusable workflow and pass values from the calling workflow.

Define the secrets in the caller repository and call the reusable workflow using the ‘secrets’ keyword.

Define the secrets in the reusable workflow’s repository and reference the secret using the ‘secrets’ context.

QUESTION 36
What benefit does GitHub Advanced Security provide?

helps enterprise administrators improve and maintain network security for their GitHub Enterprise Server instances

helps developers improve and maintain the security and quality of code

helps organization administrators analyze and configure permissions to the least privilege required

helps organization administrators manage security tokens

QUESTION 37
You are planning GitHub account management for a healthcare organization with strict compliance requirements. Which THREE of the following statements accurately describe GitHub Enterprise Managed Users (EMU) accounts? (Choose three.)

EMU accounts can be used for both personal and enterprise repositories.

EMU accounts are managed through an identity provider such as Azure AD.

EMU accounts allow users to create and manage their own credentials.

EMU accounts restrict users to enterprise-related activities only

EMU accounts are created and managed by individual users.

EMU accounts are owned by the organization and cannot be unlinked.

QUESTION 38
Which feature is unique to self-hosted runners?

Execute scripts before and after a job

Dynamic scaling

Automatic updates to the operating system

GPU support

QUESTION 39
Which events from the audit log are exposed by the GraphQL API? Each answer presents a complete solution. (Choose three.)

changes in permissions

promoting users to administrators

pushes to repositories

changes to permissions of a GitHub App

cloning of repositories

QUESTION 40
Which practice helps avoid service disruption when consuming GitHub APIs at scale?

Designing your application to work within GitHub’s rate limits

Using multiple tokens to bypass limits

Caching all API responses permanently

Ignoring secondary rate limits

QUESTION 41
What distinguishes Enterprise Managed Users (EMUs) from standard GitHub accounts?

EMUs are fully controlled by an IdP and cannot log in with personal credentials

EMUs can only be created using email invites

EMUs are managed in GitHub and use GitHub authentication

EMUs are only available for GitHub Enterprise Server

QUESTION 42
Which of the following accurately contrasts a GitHub App and a GitHub Action?

GitHub Actions can only be used to respond to events within a single repository while GitHub Apps can respond to events from multiple repositories

GitHub Actions are limited to reading repository content only

GitHub Apps can only be used inside .github/workflows

GitHub Apps run only on GitHub-provided virtual machines, while GitHub Actions run only on customer-hosted machines

QUESTION 43
Why would a GitHub App be favored over a machine account for automation tasks?

Machine accounts are required for webhook delivery.

GitHub Apps provide a higher rate limit ceiling than using a personal access token on a machine account, when they use an install token and are owned by a GitHub Enterprise Cloud licensed enterprise.

GitHub Apps are limited to a single repository.

Machine accounts are easier to audit than GitHub Apps.

QUESTION 44
What will happen if Dependabot discovers a vulnerable transitive dependency in a repository?

It creates a pull request to update the direct dependency to a version that resolves the vulnerability.

It opens a pull request to update the affected package directly, regardless of version compatibility.

It automatically removes the package from the repository.

It sends an email to the repository owner but does not alter code.

QUESTION 45
What makes GitHub Apps a more secure choice for automation over OAuth Apps?

GitHub Apps always require two-factor authentication.

GitHub Apps can only be installed by organization owners.

GitHub Apps are limited to read-only access and cannot write to repositories.

GitHub Apps authenticate as an app with fine-grained permissions, not as a user.

QUESTION 46
How is CodeQL different from other static analysis tools?

It removes insecure code automatically

It allows querying of code semantics using a database-like language.

It only works for open-source projects.

It runs analysis only after a security breach.

QUESTION 47
An organization wants to share a single API key required for their Actions workflows. They need to restrict its use to only a subset of repositories. Where should they configure the secrets to minimize maintenance?

Repository secrets

Environment secrets

Organization secrets

Development environment secrets

QUESTION 48
Which of the following GitHub token types supports fine-grained repository permissions AND is recommended for CI/CD automation?

Personal Access Tokens (PATs)

GitHub App Installation Access Tokens

Device Tokens

OAuth tokens

QUESTION 49
When comparing fine-grained Personal Access Tokens (PATs) with classic PATs, which of the following statements is accurate?

Fine-grained PATs automatically renew while classic PATs require manual renewal.

Fine-grained PATs permissions can be scoped to specific repositories.

Classic PATs offer more permission controls than fine-grained PATs.

Classic PATs can be restricted to specific organizations, but fine-grained PATs cannot.

QUESTION 50
You discover that a secret (e.g., a token or password) was accidentally committed to a GitHub repository. What is the first step you should take to mitigate the risk?

Contact GitHub Support to remove the secret from all forks and clones of the repository.

Revoke and/or rotate the secret to render it unusable, then assess whether history rewriting is necessary.

Rewrite the repository history using git filter-repo or BFG Repo-Cleaner to remove the secret from all commits.

Delete the repository and create a new one to ensure the secret is no longer accessible.

QUESTION 51
Which of the following is the responsibility of a Team Maintainer in a GitHub organization? (Choose two.)

Modifying organization-wide settings.

Managing nested sub-teams.

Adding or removing team members.

Deleting repositories assigned to the team.

QUESTION 52
When comparing Group SCIM to Team Sync for identity management in GitHub Enterprise, which statement is Correct?

Group SCIM requires less initial configuration than Team Sync.

Team Sync supports more identity providers than Group SCIM.

Team Sync provides more automated user deprovisioning than Group SCIM.

Group SCIM enables centralized user and group management through the IdP.

QUESTION 53
Which factor affects GitHub Actions pricing for GitHub-hosted runners on GitHub Enterprise Cloud?

Number of workflows defined in .github/workflows/

Number of contributors to the repository Explanation:Incorrect. Contributor count does not impact billing for Actions

Total number of repositories using Actions

Operating system used in the runner environment

QUESTION 54
What needs to be done to ensure that only specific repositories can access the runners in an organization runner group?

Use GitHub’s meta API to configure access.

Add a label to the runner group.

Configure repository access in the runner group settings.

Configure the Actions Policies to “Only selected repositories”.

QUESTION 55
Your enterprise has multiple organizations, and you want to ensure consistent security policies across all teams. Which feature should you use?

Outside collaborators for all repositories.

Organization-specific teams with custom policies.

Enterprise-level teams with inherited enterprise policies.

Assigning admin permissions to all team members.

We offers you the latest free online GH-100 dumps to practice: https://www.trainingdump.com/Microsoft/GH-100-practice-exam-dumps.html

Category GH-100

[Q34-Q55] Latest GH-100 Practice Test Questions Verified Answers As Experienced in the Actual Test!

Microsoft GH-100 Exam Syllabus Topics: