Microsoft GH-100 Exam Questions Instant Access

Question 1

Your organization is implementing team synchronization. Which of the following should you prioritize during the setup process?

ADisabling the audit log stream

BSetting an infrequent sync schedule to reduce performance impact

CAllowing manual updates to team memberships

DClearly define how identity provider groups will align with GitHub teams and roles

Answer : D

Before you enable team synchronization, you should clearly define how groups in your identity provider will map to GitHub teams and roles - ensuring that when the sync runs, users land in the correct teams with the right permissions.

Question 2

Which of the following GitHub token types supports fine-grained repository permissions AND is recommended for CI/CD automation?

APersonal Access Tokens (PATs)

BGitHub App Installation Access Tokens

CDevice Tokens

DOAuth tokens

Answer : B

GitHub App Installation Access Tokens are privileged to the exact permissions you grant the App - down to individual repositories - and rotate automatically, making them the recommended choice for CI/CD automation workflows that demand least-privilege, fine-grained access.

Question 3

Why would someone choose to configure a security policy?

ATo communicate corporate security and compliance policies for end users on a private repository.

BTo provide information on an open source repository for open source collaborators and researchers that may need to report and disclose sensitive security findings to maintainers securely.

CTo prevent anyone from pushing to the repository without approval.

DTo define which open source packages are permitted for use as part of that repository.

Answer : B

A security policy (the SECURITY.md file) lets maintainers of an open source repository provide clear, private instructions for collaborators and external researchers on how to report and disclose security vulnerabilities responsibly.

Question 4

You are managing a repository in your organization's GitHub account. A team member asks you to confirm who has access to the repository and their permission levels. Which tool should you use to review and manage repository access?

AGitHub Pages Settings.

BGitHub Actions Logs.

CRepository Settings > Manage Access.

DBranch Protection Rules.

Answer : C

Use theRepositorySettingsManageAccess page to view all users and teams with access and their assigned permission levels.

Question 5

When a user becomes a member of multiple GitHub organizations, which THREE of the following are important considerations for administrators? (Choose three.)

AThe user will automatically have the same role across all organizations.

BThe user's repository access and/or team membership needs to be managed separately for each organization.

CThe user will need to authorize credentials separately for each SAML-enabled organization.

DThe user will have different permission levels in each organization.

EThe user's profile information becomes private to non-organization members.

FThe user's personal repositories will become accessible to all organizations.

Answer : B, C, D

A user's repository access and team memberships are scoped to each organization, so admins must configure permissions separately per org.

When an organization enforces SAML SSO, each member must authorize their personal access tokens or SSH keys for that org, requiring separate approval for each SAML-enabled organization

Roles and permission levels (owner, member, billing manager, repository roles, etc.) are assigned on a per-organization basis, so a user often has different permissions in different organizations.

Question 6

Which factor affects GitHub Actions pricing for GitHub-hosted runners on GitHub Enterprise Cloud?

ANumber of workflows defined in .github/workflows/

BNumber of contributors to the repository Explanation:Incorrect. Contributor count does not impact billing for Actions

CTotal number of repositories using Actions

DOperating system used in the runner environment

Answer : D

GitHub Actions billing for GitHub-hosted runners is based on the number of minutes consumed and the operating system of the runner - Linux, Windows, and macOS each have different per-minute rates.

Question 7

You want to ensure a secret is automatically available to only workflows in internal and private repositories in the organization. Where do you configure the required access policy?

AActions policies

BRunner groups

CRulesets

DOrganization secret

Answer : D

You set the access policy on the Organization Secret itself - configuring its visibility so it's scoped automatically to only internal and private repositories.

Microsoft GitHub Administration GH-100 Exam Questions