Microsoft GH-100 Exam Questions Instant Access

Question 1

You discover that a secret (e.g., a token or password) was accidentally committed to a GitHub repository. What is the first step you should take to mitigate the risk?

AContact GitHub Support to remove the secret from all forks and clones of the repository.

BRevoke and/or rotate the secret to render it unusable, then assess whether history rewriting is necessary.

CRewrite the repository history using git filter-repo or BFG Repo-Cleaner to remove the secret from all commits.

DDelete the repository and create a new one to ensure the secret is no longer accessible.

Answer : B

The immediate priority is to revoke or rotate the exposed credential so it can no longer be used; once it's invalidated, you can safely proceed with history-rewriting or other cleanup steps.

Question 2

What needs to be done to ensure that only specific repositories can access the runners in an organization runner group?

AUse GitHub's meta API to configure access.

BAdd a label to the runner group.

CConfigure repository access in the runner group settings.

DConfigure the Actions Policies to 'Only selected repositories'.

Answer : C

In the organization's runner group settings, switch the access from ''All repositories'' to ''Selected repositories'' and then explicitly choose which repos may use those runners.

Question 3

You have subscribed to GitHub Premium Support, and you need to submit a support ticket. GitHub Premium Support can help you with:

Awriting scripts.

Binstalling GitHub Enterprise Server.

Csetting up hardware.

Dintegrating with third-party applications.

Answer : B

GitHub Premium Support includes assistance with installing and using GitHub Enterprise Server, ensuring your deployment is configured correctly and any installation issues are resolved.

Question 4

Which of the following actions can a user with Write permissions perform in a GitHub repository?

AManage repository settings, such as labels and GitHub Pages.

BPush code to non-protected branches.

CConfigure branch protection rules.

DDelete the repository.

Answer : B

Users granted Write permission can push commits to non-protected branches, allowing them to update code without needing administrative rights.

Question 5

What do you need to successfully generate a support bundle on a GitHub Enterprise Server?

AApproval from GitHub Support

BA custom GitHub Action in the root repo

CAdministrator SSH access to the appliance

DA GitHub App with read:org permissions

Answer : C

You must have administrator-level SSH access to the GitHub Enterprise Server appliance so you can run the ghe-support-bundle command over SSH and capture the bundle locally.

Question 6

Why is a GitHub App preferred over a PAT for machine authentication?

AGitHub Apps are required to pass SAML assertions

BGitHub Apps have time-limited installation tokens with scoped access

CPATs cannot be used in GitHub Actions

DPATs support fewer GitHub APIs than Apps

Answer : B

GitHub Apps issue short-lived installation tokens that you scope to only the permissions and repositories your automation needs, reducing blast radius and automatically rotating credentials.

Question 7

Which of the following is true about outside collaborators in a GitHub organization?

AThey are granted explicit access to specific repositories.

BThey inherit organization-wide policies, such as SSO requirements.

CThey have access to all private repositories by default.

DThey appear in the organization's internal member list.

Answer : A

Outside collaborators aren't organization members; instead, they're granted explicit access - at read, write, or admin level - to only the repositories you choose.

Microsoft GitHub Administration GH-100 Exam Questions