Try 100% Updated GH-100 Exam Questions [2025]
Pass GH-100 Exam - Real Questions and Answers
NEW QUESTION # 37
What additional capability does secret scanning offer for private repositories on GitHub Enterprise Cloud?
- A. Revokes GitHub access tokens automatically.
- B. Allows custom pattern definitions for internal secret formats.
- C. Rewrites history to remove secrets.
- D. Disables any code that contains a secret.
Answer: B
Explanation:
Secret scanning in private repositories on GitHub Enterprise Cloud lets you define and use custom regular-expression patterns - so you can detect internal or proprietary secret formats beyond the default partner-provided types.
NEW QUESTION # 38
What distinguishes Enterprise Managed Users (EMUs) from standard GitHub accounts?
- A. EMUs can only be created using email invites
- B. EMUs are managed in GitHub and use GitHub authentication
- C. EMUs are fully controlled by an IdP and cannot log in with personal credentials
- D. EMUs are only available for GitHub Enterprise Server
Answer: C
Explanation:
EMU accounts are provisioned and authenticated exclusively through your identity provider - users sign in via the IdP and cannot use or manage GitHub-native credentials.
NEW QUESTION # 39
What do you need to successfully generate a support bundle on a GitHub Enterprise Server?
- A. A custom GitHub Action in the root repo
- B. Approval from GitHub Support
- C. A GitHub App with read:org permissions
- D. Administrator SSH access to the appliance
Answer: D
Explanation:
You must have administrator-level SSH access to the GitHub Enterprise Server appliance so you can run the ghe-support-bundle command over SSH and capture the bundle locally.
NEW QUESTION # 40
How is CodeQL different from other static analysis tools?
- A. It runs analysis only after a security breach.
- B. It removes insecure code automatically
- C. It allows querying of code semantics using a database-like language.
- D. It only works for open-source projects.
Answer: C
Explanation:
CodeQL differs from traditional static analysis tools by ingesting your code into a queryable database and letting you write QL queries - its own database-style language - to express semantic checks and find patterns across the codebase.
NEW QUESTION # 41
A GitHub Enterprise administrator is planning to implement SAML SSO across their company. Which of the following correctly distinguishes enterprise-wide SAML SSO from organization-level SAML SSO?
- A. Enterprise-wide SAML SSO allows different organizations to use different authentication methods.
- B. Enterprise-wide SAML SSO ensures users authenticate through the same IdP across all organizations.
- C. Enterprise-wide SAML SSO requires less initial administrative overhead than organization-level implementation.
- D. Enterprise-wide SAML SSO immediately removes users who fail to authenticate via the IdP.
Answer: B
Explanation:
Enterprise-wide SAML SSO enforces a single IdP across all member organizations-its configuration overrides any per-organization SAML settings, so everyone must authenticate through the same provider.
NEW QUESTION # 42
How does Dependabot determine which security update PRs to open?
- A. It waits for manual triage of all CVEs.
- B. It compares your codebase to the GitHub Trending list.
- C. It uses the dependency graph and Dependabot alerts to open PRs for patched versions.
- D. It reads the GitHub Issues and automatically suggests fixes.
Answer: C
Explanation:
Dependabot relies on your repository's enabled Dependency Graph and Dependabot Alerts to identify vulnerable dependencies; it then automatically opens pull requests to update to the patched versions that resolve those alerts.
NEW QUESTION # 43
What is the key benefit of using a GitHub security advisory within a repository?
- A. It automatically reverts commits that introduced the vulnerability.
- B. It allows maintainers to privately disclose, discuss, and publish vulnerabilities.
- C. It flags all forks of the repository as vulnerable.
- D. It prevents users from cloning the repository until issues are resolved.
Answer: B
Explanation:
GitHub security advisories let maintainers privately disclose, discuss fixes, and then publish vulnerabilities in a controlled manner within the repository.
NEW QUESTION # 44
Which events from the audit log are exposed by the GraphQL API? Each answer presents a complete solution. (Choose three.)
- A. cloning of repositories
- B. changes in permissions
- C. promoting users to administrators
- D. pushes to repositories
- E. changes to permissions of a GitHub App
Answer: B,C,E
Explanation:
The GraphQL Audit Log API surfaces entries whenever repository or organization permissions are changed ("Changes permissions").
It records when users are elevated to administrative roles ("Promotes users to admin").
It logs alterations to a GitHub App's granted permissions ("Changes permissions of a GitHub App").
NEW QUESTION # 45
Which of the following correctly describes the difference between controlling actions at the enterprise level versus the organization level in GitHub?
- A. Enterprise policies and organization policies are independent, with organization policies taking precedence for repositories within the organization.
- B. Enterprise policies can block specific actions, while organization policies can only enable or disable actions entirely.
- C. Enterprise policies apply only to public repositories, while organization policies apply to public, internal, and private repositories.
- D. Enterprise policies configure mandatory settings for organizations.
Answer: D
Explanation:
Enterprise policies let you define and enforce mandatory settings across all member organizations - organization-level policies then operate within the options that the enterprise policy exposes.
NEW QUESTION # 46
Your organization is implementing team synchronization. Which of the following should you prioritize during the setup process?
- A. Setting an infrequent sync schedule to reduce performance impact
- B. Allowing manual updates to team memberships
- C. Disabling the audit log stream
- D. Clearly define how identity provider groups will align with GitHub teams and roles
Answer: D
Explanation:
Before you enable team synchronization, you should clearly define how groups in your identity provider will map to GitHub teams and roles - ensuring that when the sync runs, users land in the correct teams with the right permissions.
NEW QUESTION # 47
When comparing fine-grained Personal Access Tokens (PATs) with classic PATs, which of the following statements is accurate?
- A. Classic PATs offer more permission controls than fine-grained PATs.
- B. Classic PATs can be restricted to specific organizations, but fine-grained PATs cannot.
- C. Fine-grained PATs permissions can be scoped to specific repositories.
- D. Fine-grained PATs automatically renew while classic PATs require manual renewal.
Answer: C
Explanation:
Fine-grained personal access tokens let you scope permissions down to individual repositories, whereas classic PATs grant access across every repo the user can reach.
NEW QUESTION # 48
What benefit does GitHub Advanced Security provide?
- A. helps enterprise administrators improve and maintain network security for their GitHub Enterprise Server instances
- B. helps organization administrators analyze and configure permissions to the least privilege required
- C. helps developers improve and maintain the security and quality of code
- D. helps organization administrators manage security tokens
Answer: C
Explanation:
GitHub Advanced Security equips developers with built-in code scanning (CodeQL), secret scanning, dependency review, and other AppSec tools - helping them find, fix, and prevent security vulnerabilities while maintaining code quality.
NEW QUESTION # 49
What will happen if Dependabot discovers a vulnerable transitive dependency in a repository?
- A. It sends an email to the repository owner but does not alter code.
- B. It opens a pull request to update the affected package directly, regardless of version compatibility.
- C. It creates a pull request to update the direct dependency to a version that resolves the vulnerability.
- D. It automatically removes the package from the repository.
Answer: C
Explanation:
Dependabot will automatically open a pull request that updates the direct dependency to a version which, in turn, resolves (or removes) the vulnerable transitive dependency-ensuring the fix is applied via your declared dependencies.
NEW QUESTION # 50
You have subscribed to GitHub Premium Support, and you need to submit a support ticket. GitHub Premium Support can help you with:
- A. writing scripts.
- B. installing GitHub Enterprise Server.
- C. setting up hardware.
- D. integrating with third-party applications.
Answer: B
Explanation:
GitHub Premium Support includes assistance with installing and using GitHub Enterprise Server, ensuring your deployment is configured correctly and any installation issues are resolved.
NEW QUESTION # 51
Which of the following accurately contrasts a GitHub App and a GitHub Action?
- A. GitHub Apps can only be used inside .github/workflows
- B. GitHub Actions are limited to reading repository content only
- C. GitHub Actions can only be used to respond to events within a single repository while GitHub Apps can respond to events from multiple repositories
- D. GitHub Apps run only on GitHub-provided virtual machines, while GitHub Actions run only on customer-hosted machines
Answer: C
Explanation:
GitHub Actions workflows are defined and triggered within a single repository's context, whereas GitHub Apps are installed at the organization or user level and can subscribe to events across multiple repositories.
NEW QUESTION # 52
When comparing Group SCIM to Team Sync for identity management in GitHub Enterprise, which statement is Correct?
- A. Team Sync supports more identity providers than Group SCIM.
- B. Team Sync provides more automated user deprovisioning than Group SCIM.
- C. Group SCIM requires less initial configuration than Team Sync.
- D. Group SCIM enables centralized user and group management through the IdP.
Answer: D
Explanation:
GroupSCIM lets you manage both user accounts and group memberships centrally in your identity provider - automatically provisioning, updating, and deprovisioning users and groups in GitHub - whereas TeamSync only mirrors IdP group membership into existing GitHub teams.
NEW QUESTION # 53
Which of the following is the responsibility of a Team Maintainer in a GitHub organization? (Choose two.)
- A. Modifying organization-wide settings.
- B. Adding or removing team members.
- C. Deleting repositories assigned to the team.
- D. Managing nested sub-teams.
Answer: B,D
Explanation:
Team maintainers can manage nested sub-teams - requesting to add or change parent/child teams within the organization's hierarchy.
Team maintainers have permission to add and remove members from their team, controlling day-to-day team membership.
NEW QUESTION # 54
Which practice helps avoid service disruption when consuming GitHub APIs at scale?
- A. Designing your application to work within GitHub's rate limits
- B. Ignoring secondary rate limits
- C. Caching all API responses permanently
- D. Using multiple tokens to bypass limits
Answer: A
Explanation:
Designing your integration to stay within GitHub's documented rate limits-by batching requests, using conditional requests, handling 429 responses with back-off, and monitoring the X-RateLimit-* headers - ensures you won't be temporarily throttled or cut off when you hit secondary limits.
NEW QUESTION # 55
Which feature is unique to self-hosted runners?
- A. Automatic updates to the operating system
- B. Execute scripts before and after a job
- C. Dynamic scaling
- D. GPU support
Answer: B
Explanation:
Self-hosted runners support custom pre- and post-job scripts via runner hooks, letting you run arbitrary scripts before a job starts and after it finishes - capabilities not available on GitHub-hosted runners.
NEW QUESTION # 56
When a token is used to perform actions across different GitHub resources, how is this reflected in audit logs?
- A. Each API action made with the token generates a separate audit log entry
- B. The audit log stores only the token name and not its actions
- C. Only the first repository accessed is recorded
- D. GitHub creates a ZIP archive of all token activity
Answer: A
Explanation:
Each API call authenticated with a token generates its own audit-log event, so you'll see a distinct entry for every action performed across different resources, each annotated with the token's hashed ID, actor, and source IP.
NEW QUESTION # 57
Which Git operation is not included in the Git activity audit log?
- A. Push
- B. Delete branch
- C. Fetch
- D. Clone
Answer: B
Explanation:
Delete branch operations aren't tracked as Git-activity events; the Git activity audit log only records Git events such as clone, fetch (pull), and push.
NEW QUESTION # 58
Your organization wants to reduce costs. Which of the following actions should you take?
- A. Remove all outside collaborators
- B. Disable SAML SSO for members
- C. Grant all users admin permissions
- D. Regularly audit for inactive users
Answer: D
Explanation:
Regularly auditing for inactive (dormant) users lets you suspend or remove accounts that aren't consuming seats - freeing up licenses and directly lowering your per-user subscription costs.
NEW QUESTION # 59
......
Microsoft GH-100 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
GH-100 Exam Questions Get Updated [2025] with Correct Answers: https://dumpstorrent.dumpsfree.com/GH-100-valid-exam.html