Microsoft GH-100 Exam Questions Instant Access

Question 1

Which of the following is the responsibility of a Team Maintainer in a GitHub organization? (Choose two.)

AModifying organization-wide settings.

BManaging nested sub-teams.

CAdding or removing team members.

DDeleting repositories assigned to the team.

Answer : B, C

Team maintainers can manage nested sub-teams - requesting to add or change parent/child teams within the organization's hierarchy.

Team maintainers have permission to add and remove members from their team, controlling day-to-day team membership.

Question 2

In a GitHub repository using Dependabot, which of the following best describes the purpose of the .github/dependabot.yml file?

AIt configures scheduling, package ecosystems, and target directories for update checks.

BIt lists commit SHAs to exclude from automatic pull requests.

CIt enables GitHub to scan for secrets in dependency files.

DIt encrypts dependency versions before storing them in the repo.

Answer : A

The .github/dependabot.yml file defines Dependabot's package-ecosystem, the directories to inspect, and the update schedule (daily/weekly/monthly), controlling when and where Dependabot checks for new versions.

Question 3

You discover that a secret (e.g., a token or password) was accidentally committed to a GitHub repository. What is the first step you should take to mitigate the risk?

AContact GitHub Support to remove the secret from all forks and clones of the repository.

BRevoke and/or rotate the secret to render it unusable, then assess whether history rewriting is necessary.

CRewrite the repository history using git filter-repo or BFG Repo-Cleaner to remove the secret from all commits.

DDelete the repository and create a new one to ensure the secret is no longer accessible.

Answer : B

The immediate priority is to revoke or rotate the exposed credential so it can no longer be used; once it's invalidated, you can safely proceed with history-rewriting or other cleanup steps.

Question 4

What is a key characteristic of GitHub Enterprise Server (GHES) compared to GitHub Enterprise Cloud (GHEC)?

AGHES is hosted by GitHub and offers automatic scaling, while GHEC requires self-hosting.

BGHEC offers data residency options in regions that GHES does not support.

CGHES allows enterprises to have complete control over their hosting environment, including data storage and network security policies.

DGHES users cannot integrate with external identity providers for authentication.

Answer : C

GitHub Enterprise Server is a self-hosted product you install and manage on your own infrastructure - giving you full control over data storage, network security policies, and the underlying environment.

Question 5

An organization wants to share a single API key required for their Actions workflows. They need to restrict its use to only a subset of repositories. Where should they configure the secrets to minimize maintenance?

ARepository secrets

BEnvironment secrets

COrganization secrets

DDevelopment environment secrets

Answer : C

By defining the API key as an organization secret, you centralize management and can grant access only to the subset of repositories you choose - eliminating per-repo duplication while enforcing the desired scope.

Question 6

You are using GitHub-hosted runners and need to securely deploy to an internal system. The security team requires that these runners use IP address ranges that would not be shared with other companies. Which of the following approaches would meet their requirements?

AGitHub-hosted larger runners with Azure private networking

BGitHub-hosted standard runners, using the IP addresses provided in 'actions' from https://api.github.com/meta

CGitHub-hosted standard runners, using the IP addresses provided in 'api' from https://api.github.com/meta

DGitHub-hosted larger runners with static IP addresses

Answer : D

GitHub's larger runners let you reserve dedicated static IP addresses for your workflows - so you can allow-list those IPs in your firewall and be sure they aren't shared with any other tenant.

Question 7

Which of the following GitHub token types supports fine-grained repository permissions AND is recommended for CI/CD automation?

APersonal Access Tokens (PATs)

BGitHub App Installation Access Tokens

CDevice Tokens

DOAuth tokens

Answer : B

GitHub App Installation Access Tokens are privileged to the exact permissions you grant the App - down to individual repositories - and rotate automatically, making them the recommended choice for CI/CD automation workflows that demand least-privilege, fine-grained access.

Microsoft GitHub Enterprise Administrator GH-100 Exam Questions