Verified & Latest GH-100 Dump Q&As with Correct Answers [Q21-Q36]

Rate this post

Verified & Latest GH-100 Dump Q&As with Correct Answers

Latest GH-100 dumps – Instant Download PDF

NO.21 How does Dependabot determine which security update PRs to open?

It waits for manual triage of all CVEs.

It uses the dependency graph and Dependabot alerts to open PRs for patched versions.

It reads the GitHub Issues and automatically suggests fixes.

It compares your codebase to the GitHub Trending list.

Dependabot relies on your repository’s enabled Dependency Graph and Dependabot Alerts to identify vulnerable dependencies; it then automatically opens pull requests to update to the patched versions that resolve those alerts.

NO.22 Which of the following actions can a user with Write permissions perform in a GitHub repository?

Manage repository settings, such as labels and GitHub Pages.

Push code to non-protected branches.

Configure branch protection rules.

Delete the repository.

Users granted Write permission can push commits to non-protected branches, allowing them to update code without needing administrative rights.

NO.23 Our organization is updating its enterprise policies. Which of the following steps should you take to ensure alignment with security requirements?

Maintain clear documentation of existing policies and policy changes.

Implement the new enterprise policies across the organization first and then consult with the security team to identify- any necessary adjustments or retrofits

Implement changes without consulting stakeholders.

Regularly assess and adjust policies based on evolving risks.

NO.24 What is the potential consequence of enabling multiple rulesets that apply to the same branch in a repository?

Only organization-level rulesets are enforced over repository-level ones

All applicable rulesets will be evaluated, and their combined rules enforced

Only the most recently created ruleset will be enforced

Rulesets will override each other, leading to unpredictable behavior

If you enable multiple rulesets that target the same branch, GitHub will evaluateevery matching ruleset and enforce the aggregate of their rules – so all constraints from all applicable rulesets apply.

NO.25 Your enterprise has multiple organizations, and you want to ensure consistent security policies across all teams. Which feature should you use?

Outside collaborators for all repositories.

Organization-specific teams with custom policies.

Enterprise-level teams with inherited enterprise policies.

Assigning admin permissions to all team members.

By using enterprise-level teams with inherited enterprise policies, you can group members across all your organizations and enforce the same security settings globally – ensuring every team abides by the enterprise’s mandatory policies.

NO.26 What needs to be done to ensure that only specific repositories can access the runners in an organization runner group?

Use GitHub’s meta API to configure access.

Add a label to the runner group.

Configure repository access in the runner group settings.

Configure the Actions Policies to “Only selected repositories”.

In the organization’s runner group settings, switch the access from “All repositories” to “Selected repositories” and then explicitly choose which repos may use those runners.

NO.27 Which of the following is the responsibility of a Team Maintainer in a GitHub organization? (Choose two.)

Modifying organization-wide settings.

Managing nested sub-teams.

Adding or removing team members.

Deleting repositories assigned to the team.

Team maintainers can manage nested sub-teams – requesting to add or change parent/child teams within the organization’s hierarchy.
Team maintainers have permission to add and remove members from their team, controlling day-to-day team membership.

NO.28 What is the effect of enforcing a policy that restricts GitHub Actions to only those created by the enterprise?

Marketplace actions are allowed only with SSO enabled

Actions can only be triggered by organization members

Only actions created within the enterprise are allowed

All public actions are allowed

When you enforce the “Allow enterprise actions and reusable workflows” policy, GitHub will block all workflows from using actions or reusable workflows that aren’t defined in a repository within your enterprise – so only actions created inside your enterprise are allowed.

NO.29 Which product’s usage is not included in GitHub Enterprise Cloud’s monthly metered billing report?

Git LFS bandwidth

GitHub Actions minutes

GitHub Discussions engagement

GitHub Packages storage

GitHubDiscussions engagement isn’t a metered product and doesn’t appear in the “Product billing” list, so its usage isn’t included in the monthly metered billing report.

NO.30 You need GitHub to automatically notify a third-party service any time a new repository is created. You want to avoid writing custom code. The vendor has told you that they have a tool in the GitHub Marketplace. Which type of tool do you need?

GitHub App

GitHub Copilot Extension

GitHub Models

GitHub Action

You need a GitHub App. Marketplace integrations that listen for events like repository.created and send notifications are delivered as GitHub Apps, since they can subscribe to organization-level webhooks without you writing custom code.

NO.31 What do you need to successfully generate a support bundle on a GitHub Enterprise Server?

Approval from GitHub Support

A custom GitHub Action in the root repo

Administrator SSH access to the appliance

A GitHub App with read:org permissions

You must have administrator-level SSH access to the GitHub Enterprise Server appliance so you can run the ghe-support-bundle command over SSH and capture the bundle locally.

NO.32 When comparing a partner identity provider integration with a non-partner identity management solution for GitHub Enterprise Managed Users, which statement is Correct?

The non-partner identity provider integrations can utilize OIDC for authentication.

The non-partner identity provider integrations require manual configuration of SAML 2.0 details.

The partner identity provider integrations support fewer GitHub-supported authentication methods.

The partner identity provider integrations rely on the partner to support the application on the partner IdP.

Non-partner identity provider integrations require you to enter SAML2.0 configuration details by hand – such as the Sign-on URL, Issuer, and X.509 certificate – whereas partner IdPs supply a pre-configured application integration.

NO.33 You want to ensure a secret is automatically available to only workflows in internal and private repositories in the organization. Where do you configure the required access policy?

Actions policies

Runner groups

Rulesets

Organization secret

You set the access policy on the Organization Secret itself – configuring its visibility so it’s scoped automatically to only internal and private repositories.

NO.34 A token was used to access an organization’s resource via API. What fields in the audit log help determine who used it?

The token’s permissions and the geographic region of access

The token expiration date

The GitHub Actions runner name

The token ID, requesting IP address, and associated user

The audit log records the token’s identifier (the hashed_token value), the source IP address of the request, and the actor (the user or app) associated with that token, allowing you to trace exactly who used it.

NO.35 What benefit does GitHub Advanced Security provide?

helps organization administrators analyze and configure permissions to the least privilege required

helps developers improve and maintain the security and quality of code

helps enterprise administrators improve and maintain network security for their GitHub Enterprise Server instances

helps organization administrators manage security tokens

GitHub Advanced Security equips developers with built-in code scanning (CodeQL), secret scanning, dependency review, and other AppSec tools – helping them find, fix, and prevent security vulnerabilities while maintaining code quality.

NO.36 Which Git operation is not included in the Git activity audit log?

Delete branch

Fetch

Push

Clone

Delete branch operations aren’t tracked as Git-activity events; the Git activity audit log only records Git events such as clone, fetch (pull), and push.

Loading …

Microsoft GH-100 Exam Syllabus Topics:

Topic	Details
Topic 1	Manage GitHub Actions: This section of the exam measures skills of DevOps Engineers and emphasizes managing workflows, reusable actions, and distribution strategies within the enterprise. It explains configuring organization-level policies, managing self-hosted and GitHub-hosted runners, controlling access through IP allow lists, handling encrypted secrets, and integrating third-party vaults for workflow security.
Topic 2	Manage GitHub Packages:This section of the exam measures skills of GitHub Enterprise Administrators and focuses on managing GitHub Packages, their use in workflows, and how they differ from releases. It involves accessing, writing, and sharing packages across teams while ensuring integration into CI CD pipelines.
Topic 3	Describe how GitHub is deployed, distributed, and licensed: This section of the exam measures skills of GitHub Enterprise Administrators and highlights the deployment models of GitHub Enterprise Server, Enterprise Cloud, and GitHub AE. It covers licensing structures, billing for seat licenses and metered services, support options, and monitoring license usage across users and machine accounts.