UPDATED [Nov 30, 2025] Pass GitHub Administration Exam with Latest Questions
GH-100 Exam Practice Questions prepared by Microsoft Professionals
NEW QUESTION # 18
Which of the following actions can a user with Write permissions perform in a GitHub repository?
- A. Configure branch protection rules.
- B. Manage repository settings, such as labels and GitHub Pages.
- C. Delete the repository.
- D. Push code to non-protected branches.
Answer: D
Explanation:
Users granted Write permission can push commits to non-protected branches, allowing them to update code without needing administrative rights.
NEW QUESTION # 19
What needs to be done to ensure that only specific repositories can access the runners in an organization runner group?
- A. Add a label to the runner group.
- B. Use GitHub's meta API to configure access.
- C. Configure the Actions Policies to "Only selected repositories".
- D. Configure repository access in the runner group settings.
Answer: D
Explanation:
In the organization's runner group settings, switch the access from "All repositories" to "Selected repositories" and then explicitly choose which repos may use those runners.
NEW QUESTION # 20
You have subscribed to GitHub Premium Support, and you need to submit a support ticket. GitHub Premium Support can help you with:
- A. writing scripts.
- B. setting up hardware.
- C. installing GitHub Enterprise Server.
- D. integrating with third-party applications.
Answer: C
Explanation:
GitHub Premium Support includes assistance with installing and using GitHub Enterprise Server, ensuring your deployment is configured correctly and any installation issues are resolved.
NEW QUESTION # 21
An organization wants to share a single API key required for their Actions workflows. They need to restrict its use to only a subset of repositories. Where should they configure the secrets to minimize maintenance?
- A. Repository secrets
- B. Organization secrets
- C. Development environment secrets
- D. Environment secrets
Answer: B
Explanation:
By defining the API key as an organization secret, you centralize management and can grant access only to the subset of repositories you choose - eliminating per-repo duplication while enforcing the desired scope.
NEW QUESTION # 22
Which THREE of the following accurately describe how the SCIM protocol enhances user management in GitHub Enterprise Cloud? (Choose three.)
- A. SCIM automatically deletes organization repositories when administrators are removed.
- B. SCIM configures repository permissions based on user roles within the organization.
- C. SCIM generates authentication tokens for accessing GitHub's REST API.
- D. SCIM automates user provisioning when new users are added to the identity provider.
- E. SCIM synchronizes changes to user attributes from the identity provider to GitHub.
- F. SCIM deactivates GitHub accounts when users are deleted from the identity provider.
Answer: E,F
Explanation:
SCIM automatically updates a user's account on GitHub whenever their profile attributes change in the identity provider.
When a user is removed or deactivated in the IdP, SCIM deactivates (soft-deprovisions) their GitHub account and disables access.
SCIM provisions new GitHub Enterprise Cloud accounts automatically when users are added in the identity provider.
NEW QUESTION # 23
A financial services company is evaluating GitHub account types. Which of the following is a key distinction between GitHub Enterprise Managed Users and Personal Accounts?
- A. Enterprise Managed Users can collaborate across both personal and enterprise repositories.
- B. Enterprise Managed Users require the organization to manage their own authentication server.
- C. Personal Accounts provide stricter control over repositories and user activity.
- D. Personal Accounts are owned by users and can be used for both personal and professional work.
Answer: D
Explanation:
Personal Accounts are owned and controlled by individual users and can serve both their personal projects and professional work, whereas Enterprise Managed Users exist solely within the enterprise context and cannot be used for personal repositories.
NEW QUESTION # 24
What will happen if Dependabot discovers a vulnerable transitive dependency in a repository?
- A. It automatically removes the package from the repository.
- B. It creates a pull request to update the direct dependency to a version that resolves the vulnerability.
- C. It opens a pull request to update the affected package directly, regardless of version compatibility.
- D. It sends an email to the repository owner but does not alter code.
Answer: B
Explanation:
Dependabot will automatically open a pull request that updates the direct dependency to a version which, in turn, resolves (or removes) the vulnerable transitive dependency-ensuring the fix is applied via your declared dependencies.
NEW QUESTION # 25
You need to create a support bundle for your GitHub Enterprise Server instance with the hostname ghe.avocado.corp. What command should you use to create a support bundle?
- A. ssh -p 122 [email protected] - 'ghe-diagnostics' > support-bundle.tgz
- B. ssh -p 122 [email protected] -- 'ghe-support-bundle -o' > support-bundle.tgz
- C. curl -u admin https://ghe.avocado.corp/diagnostics/support-bundle.tgz -o
- D. ssh -p 122 [email protected] -- 'ghe-config generate-support-bundle' > support-bundle.tgz
Answer: B
Explanation:
Run the ghe-support-bundle command over SSH on your appliance and redirect its output to a file. For example:
ssh -p 122 [email protected] -- 'ghe-support-bundle -o' > support-bundle.tgz This invokes the built-in support-bundle utility on your GitHub Enterprise Server instance and captures the resulting archive locally.
NEW QUESTION # 26
What is the new capability of GitHub's billing dashboard?
- A. Automatically removes unused users from billing
- B. Offers real-time Slack alerts for billing
- C. Allows self-service plan upgrades
- D. Enables tracking of GitHub Copilot usage by user
Answer: D
Explanation:
The revamped Billing&Licensing dashboard now includes a dedicated"Copilot" tab that shows per-user seat assignments, usage counts, and estimated costs for your organization's GitHub Copilot licenses, enabling you to track Copilot consumption by individual users.
NEW QUESTION # 27
Which of the following is a key benefit of setting default read permissions across organizations?
- A. Enhances security by minimizing unintended modifications.
- B. Increases efficiency in content creation and updates.
- C. Improves collaboration by allowing users to modify content directly.
- D. Suits environments where all users need write access.
Answer: A
Explanation:
Enforcing a default of Read for organization members ensures they can view content without the ability to push changes, reducing the risk of accidental or unauthorized modifications.
NEW QUESTION # 28
How does GitHub handle secrets found via secret scanning in a public repository?
- A. It immediately blocks the commit to protect the secret.
- B. It deletes the secret from the repository automatically.
- C. It notifies the admin via webhook.
- D. It alerts the service provider (e.g., AWS, Stripe).
Answer: D
Explanation:
When secret scanning detects a supported credential in a public repository, GitHub notifies the issuing service provider so they can revoke or rotate the exposed secret.
NEW QUESTION # 29
Which practice helps avoid service disruption when consuming GitHub APIs at scale?
- A. Caching all API responses permanently
- B. Using multiple tokens to bypass limits
- C. Designing your application to work within GitHub's rate limits
- D. Ignoring secondary rate limits
Answer: C
Explanation:
Designing your integration to stay within GitHub's documented rate limits-by batching requests, using conditional requests, handling 429 responses with back-off, and monitoring the X-RateLimit-* headers - ensures you won't be temporarily throttled or cut off when you hit secondary limits.
NEW QUESTION # 30
What additional capability does secret scanning offer for private repositories on GitHub Enterprise Cloud?
- A. Rewrites history to remove secrets.
- B. Disables any code that contains a secret.
- C. Allows custom pattern definitions for internal secret formats.
- D. Revokes GitHub access tokens automatically.
Answer: C
Explanation:
Secret scanning in private repositories on GitHub Enterprise Cloud lets you define and use custom regular-expression patterns - so you can detect internal or proprietary secret formats beyond the default partner-provided types.
NEW QUESTION # 31
You are planning GitHub account management for a healthcare organization with strict compliance requirements. Which THREE of the following statements accurately describe GitHub Enterprise Managed Users (EMU) accounts? (Choose three.)
- A. EMU accounts are managed through an identity provider such as Azure AD.
- B. EMU accounts are created and managed by individual users.
- C. EMU accounts can be used for both personal and enterprise repositories.
- D. EMU accounts allow users to create and manage their own credentials.
- E. EMU accounts restrict users to enterprise-related activities only
- F. EMU accounts are owned by the organization and cannot be unlinked.
Answer: A,E,F
Explanation:
Enterprise Managed User accounts are provisioned and authenticated exclusively through your identity provider (for example, AzureAD), so the IdP handles their creation, attribute updates, and deprovisioning.
Managed user accounts cannot create public content or interact with repositories outside your enterprise; they're confined to private and internal repos within the enterprise.
EMU accounts are owned and controlled by the enterprise (via the IdP) and cannot be converted into or unlinked as personal accounts outside that enterprise.
NEW QUESTION # 32
Which of the following correctly describes the difference between controlling actions at the enterprise level versus the organization level in GitHub?
- A. Enterprise policies can block specific actions, while organization policies can only enable or disable actions entirely.
- B. Enterprise policies and organization policies are independent, with organization policies taking precedence for repositories within the organization.
- C. Enterprise policies apply only to public repositories, while organization policies apply to public, internal, and private repositories.
- D. Enterprise policies configure mandatory settings for organizations.
Answer: D
Explanation:
Enterprise policies let you define and enforce mandatory settings across all member organizations - organization-level policies then operate within the options that the enterprise policy exposes.
NEW QUESTION # 33
......
Microsoft GH-100 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
GH-100 Exam Practice Materials Collection: https://www.examprepaway.com/Microsoft/braindumps.GH-100.ete.file.html
Use Valid New GH-100 Questions - Top choice Help You Gain Success: https://drive.google.com/open?id=12tKarkFiuh7zguNf9ZUAWumOsfvA1tFm