Pass GitHub Administrator GH-100 exam [Dec 16, 2025] Updated 67 Questions [Q20-Q41]

QUESTION 20
A token was used to access an organization’s resource via API. What fields in the audit log help determine who used it?

The token’s permissions and the geographic region of access

The token expiration date

The GitHub Actions runner name

The token ID, requesting IP address, and associated user

QUESTION 21
Why would a GitHub App be favored over a machine account for automation tasks?

Machine accounts are required for webhook delivery.

GitHub Apps provide a higher rate limit ceiling than using a personal access token on a machine account, when they use an install token and are owned by a GitHub Enterprise Cloud licensed enterprise.

GitHub Apps are limited to a single repository.

Machine accounts are easier to audit than GitHub Apps.

QUESTION 22
Which feature is unique to self-hosted runners?

Execute scripts before and after a job

Dynamic scaling

Automatic updates to the operating system

GPU support

QUESTION 23
What is the potential consequence of enabling multiple rulesets that apply to the same branch in a repository?

Only organization-level rulesets are enforced over repository-level ones

All applicable rulesets will be evaluated, and their combined rules enforced

Only the most recently created ruleset will be enforced

Rulesets will override each other, leading to unpredictable behavior

QUESTION 24
Which of the following actions can a user with Write permissions perform in a GitHub repository?

Manage repository settings, such as labels and GitHub Pages.

Push code to non-protected branches.

Configure branch protection rules.

Delete the repository.

QUESTION 25
Which of the following correctly describes the difference between controlling actions at the enterprise level versus the organization level in GitHub?

Enterprise policies and organization policies are independent, with organization policies taking precedence for repositories within the organization.

Enterprise policies configure mandatory settings for organizations.

Enterprise policies apply only to public repositories, while organization policies apply to public, internal, and private repositories.

Enterprise policies can block specific actions, while organization policies can only enable or disable actions entirely.

QUESTION 26
Which of the following is the responsibility of a Team Maintainer in a GitHub organization? (Choose two.)

Modifying organization-wide settings.

Managing nested sub-teams.

Adding or removing team members.

Deleting repositories assigned to the team.

QUESTION 27
What additional capability does secret scanning offer for private repositories on GitHub Enterprise Cloud?

Allows custom pattern definitions for internal secret formats.

Disables any code that contains a secret.

Rewrites history to remove secrets.

Revokes GitHub access tokens automatically.

QUESTION 28
How does metered billing work in GitHub Enterprise Cloud with Enterprise Managed Users (EMU)?

Billing is based on number of total users in the enterprise

Billing is based on owners and members of GitHub organizations

Billing is based on total users in the enterprise that are not dormant

Billing is based on the number of users created in Azure AD

QUESTION 29
Which of the following is true about outside collaborators in a GitHub organization?

They are granted explicit access to specific repositories.

They inherit organization-wide policies, such as SSO requirements.

They have access to all private repositories by default.

They appear in the organization’s internal member list.

QUESTION 30
How does GitHub handle secrets found via secret scanning in a public repository?

It alerts the service provider (e.g., AWS, Stripe).

It immediately blocks the commit to protect the secret.

It deletes the secret from the repository automatically.

It notifies the admin via webhook.

QUESTION 31
What do you need to successfully generate a support bundle on a GitHub Enterprise Server?

Approval from GitHub Support

A custom GitHub Action in the root repo

Administrator SSH access to the appliance

A GitHub App with read:org permissions

QUESTION 32
Which of the following are valid ways to pass data to a reusable workflow in a separate repository?

Use environment variables to pass data directly to the reusable workflow.

Define inputs in the reusable workflow and pass values from the calling workflow.

Define the secrets in the caller repository and call the reusable workflow using the ‘secrets’ keyword.

Define the secrets in the reusable workflow’s repository and reference the secret using the ‘secrets’ context.

QUESTION 33
What is the first step when sensitive data is accidentally pushed to a public GitHub repository?

Revoke any exposed credentials immediately

Force push a commit removing the data

Open an issue to inform users

Delete the repository

QUESTION 34
Our organization is updating its enterprise policies. Which of the following steps should you take to ensure alignment with security requirements?

Maintain clear documentation of existing policies and policy changes.

Implement the new enterprise policies across the organization first and then consult with the security team to identify- any necessary adjustments or retrofits

Implement changes without consulting stakeholders.

Regularly assess and adjust policies based on evolving risks.

QUESTION 35
A GitHub Enterprise administrator is planning to implement SAML SSO across their company. Which of the following correctly distinguishes enterprise-wide SAML SSO from organization-level SAML SSO?

Enterprise-wide SAML SSO requires less initial administrative overhead than organization-level implementation.

Enterprise-wide SAML SSO allows different organizations to use different authentication methods.

Enterprise-wide SAML SSO immediately removes users who fail to authenticate via the IdP.

Enterprise-wide SAML SSO ensures users authenticate through the same IdP across all organizations.

QUESTION 36
When a user becomes a member of multiple GitHub organizations, which THREE of the following are important considerations for administrators? (Choose three.)

The user will automatically have the same role across all organizations.

The user’s repository access and/or team membership needs to be managed separately for each organization.

The user will need to authorize credentials separately for each SAML-enabled organization.

The user will have different permission levels in each organization.

The user’s profile information becomes private to non-organization members.

The user’s personal repositories will become accessible to all organizations.

QUESTION 37
When comparing Group SCIM to Team Sync for identity management in GitHub Enterprise, which statement is Correct?

Group SCIM requires less initial configuration than Team Sync.

Team Sync supports more identity providers than Group SCIM.

Team Sync provides more automated user deprovisioning than Group SCIM.

Group SCIM enables centralized user and group management through the IdP.

QUESTION 38
What needs to be done to ensure that only specific repositories can access the runners in an organization runner group?

Use GitHub’s meta API to configure access.

Add a label to the runner group.

Configure repository access in the runner group settings.

Configure the Actions Policies to “Only selected repositories”.

QUESTION 39
Which of the following is a key benefit of using GitHub Marketplace Apps in an enterprise?

They guarantee no downtime during enterprise GitHub maintenance windows

They often include integrations with external services, reducing the need for custom code

Apps eliminate the need for GitHub Actions entirely

All apps come pre-approved by GitHub’s internal security team

QUESTION 40
Which product’s usage is not included in GitHub Enterprise Cloud’s monthly metered billing report?

Git LFS bandwidth

GitHub Actions minutes

GitHub Discussions engagement

GitHub Packages storage

QUESTION 41
Which of the following is a key benefit of setting default read permissions across organizations?

Suits environments where all users need write access.

Improves collaboration by allowing users to modify content directly.

Increases efficiency in content creation and updates.

Enhances security by minimizing unintended modifications.

Leave a Reply Cancel reply