GH-100 Free Practice Test

A financial services company is evaluating GitHub account types. Which of the following is a key distinction between GitHub Enterprise Managed Users and Personal Accounts?

1. A. Enterprise Managed Users can collaborate across both personal and enterprise repositories.
2. B. Personal Accounts are owned by users and can be used for both personal and professional work.
3. C. Personal Accounts provide stricter control over repositories and user activity.
4. D. Enterprise Managed Users require the organization to manage their own authentication server.

Correct Answer: B
Personal Accounts are owned and controlled by individual users and can serve both their personal projects and professional work, whereas Enterprise Managed Users exist solely within the enterprise context and cannot be used for personal repositories.

What is the key benefit of using a GitHub security advisory within a repository?

1. A. It automatically reverts commits that introduced the vulnerability.
2. B. It allows maintainers to privately disclose, discuss, and publish vulnerabilities.
3. C. It flags all forks of the repository as vulnerable.
4. D. It prevents users from cloning the repository until issues are resolved.

Correct Answer: B
GitHub security advisories let maintainers privately disclose, discuss fixes, and then publish vulnerabilities in a controlled manner within the repository.

You need GitHub to automatically notify a third-party service any time a new repository is created. You want to avoid writing custom code. The vendor has told you that they have a tool in the GitHub Marketplace. Which type of tool do you need?

1. A. GitHub App
2. B. GitHub Copilot Extension
3. C. GitHub Models
4. D. GitHub Action

Correct Answer: A
You need a GitHub App. Marketplace integrations that listen for events like repository.created and send notifications are delivered as GitHub Apps, since they can subscribe to organization#level webhooks without you writing custom code.

What is the potential consequence of enabling multiple rulesets that apply to the same branch in a repository?

1. A. Only organization-level rulesets are enforced over repository-level ones
2. B. All applicable rulesets will be evaluated, and their combined rules enforced
3. C. Only the most recently created ruleset will be enforced
4. D. Rulesets will override each other, leading to unpredictable behavior

Correct Answer: B
If you enable multiple rulesets that target the same branch, GitHub will evaluate every matching ruleset and enforce the aggregate of their rules - so all constraints from all applicable rulesets apply.

Which events from the audit log are exposed by the GraphQL API? Each answer presents a complete solution. (Choose three.)

1. A. changes in permissions
2. B. promoting users to administrators
3. C. pushes to repositories
4. D. changes to permissions of a GitHub App
5. E. cloning of repositories

Correct Answer: ABD
The GraphQL Audit Log API surfaces entries whenever repository or organization permissions are changed ("Changes permissions").
It records when users are elevated to administrative roles ("Promotes users to admin").
It logs alterations to a GitHub App's granted permissions ("Changes permissions of a GitHub App").