[2025] New GH-100 exam dumps Use Updated Microsoft Exam
Verified GH-100 Dumps Q&As - GH-100 Test Engine with Correct Answers
NEW QUESTION # 40
Which of the following is a key benefit of using GitHub Marketplace Apps in an enterprise?
- A. They guarantee no downtime during enterprise GitHub maintenance windows
- B. Apps eliminate the need for GitHub Actions entirely
- C. They often include integrations with external services, reducing the need for custom code
- D. All apps come pre-approved by GitHub's internal security team
Answer: C
Explanation:
GitHub Marketplace Apps come with built-in integrations to external services - so you can plug in things like CI servers, code-quality scanners, or deployment tools without writing and maintaining custom connectors.
NEW QUESTION # 41
Which GitHub feature is responsible for tracking dependencies and known vulnerabilities in those dependencies from an advisory database?
- A. Security Policy
- B. CodeQL
- C. Dependency Graph
- D. Repository Insights
Answer: C
Explanation:
The Dependency Graph continuously analyzes your repository's manifest and lock files to build an inventory of direct and transitive dependencies and flags any that match entries in the GitHub Advisory Database, surfacing known vulnerabilities.
NEW QUESTION # 42
What needs to be done to ensure that only specific repositories can access the runners in an organization runner group?
- A. Use GitHub's meta API to configure access.
- B. Add a label to the runner group.
- C. Configure repository access in the runner group settings.
- D. Configure the Actions Policies to "Only selected repositories".
Answer: C
Explanation:
In the organization's runner group settings, switch the access from "All repositories" to "Selected repositories" and then explicitly choose which repos may use those runners.
NEW QUESTION # 43
You need to create a support bundle for your GitHub Enterprise Server instance with the hostname ghe.avocado.corp. What command should you use to create a support bundle?
- A. ssh -p 122 [email protected] -- 'ghe-config generate-support-bundle' > support-bundle.tgz
- B. ssh -p 122 [email protected] -- 'ghe-support-bundle -o' > support-bundle.tgz
- C. curl -u admin https://ghe.avocado.corp/diagnostics/support-bundle.tgz -o
- D. ssh -p 122 [email protected] - 'ghe-diagnostics' > support-bundle.tgz
Answer: B
Explanation:
Run the ghe-support-bundle command over SSH on your appliance and redirect its output to a file. For example:
ssh -p 122 [email protected] -- 'ghe-support-bundle -o' > support-bundle.tgz This invokes the built-in support-bundle utility on your GitHub Enterprise Server instance and captures the resulting archive locally.
NEW QUESTION # 44
What is the key benefit of using a GitHub security advisory within a repository?
- A. It flags all forks of the repository as vulnerable.
- B. It prevents users from cloning the repository until issues are resolved.
- C. It automatically reverts commits that introduced the vulnerability.
- D. It allows maintainers to privately disclose, discuss, and publish vulnerabilities.
Answer: D
Explanation:
GitHub security advisories let maintainers privately disclose, discuss fixes, and then publish vulnerabilities in a controlled manner within the repository.
NEW QUESTION # 45
Your enterprise has multiple organizations, and you want to ensure consistent security policies across all teams. Which feature should you use?
- A. Outside collaborators for all repositories.
- B. Organization-specific teams with custom policies.
- C. Assigning admin permissions to all team members.
- D. Enterprise-level teams with inherited enterprise policies.
Answer: D
Explanation:
By using enterprise-level teams with inherited enterprise policies, you can group members across all your organizations and enforce the same security settings globally - ensuring every team abides by the enterprise's mandatory policies.
NEW QUESTION # 46
Which THREE of the following accurately describe how the SCIM protocol enhances user management in GitHub Enterprise Cloud? (Choose three.)
- A. SCIM automates user provisioning when new users are added to the identity provider.
- B. SCIM deactivates GitHub accounts when users are deleted from the identity provider.
- C. SCIM configures repository permissions based on user roles within the organization.
- D. SCIM automatically deletes organization repositories when administrators are removed.
- E. SCIM generates authentication tokens for accessing GitHub's REST API.
- F. SCIM synchronizes changes to user attributes from the identity provider to GitHub.
Answer: B,F
Explanation:
SCIM automatically updates a user's account on GitHub whenever their profile attributes change in the identity provider.
When a user is removed or deactivated in the IdP, SCIM deactivates (soft-deprovisions) their GitHub account and disables access.
SCIM provisions new GitHub Enterprise Cloud accounts automatically when users are added in the identity provider.
NEW QUESTION # 47
Which of the following is true about outside collaborators in a GitHub organization?
- A. They have access to all private repositories by default.
- B. They are granted explicit access to specific repositories.
- C. They inherit organization-wide policies, such as SSO requirements.
- D. They appear in the organization's internal member list.
Answer: B
Explanation:
Outside collaborators aren't organization members; instead, they're granted explicit access - at read, write, or admin level - to only the repositories you choose.
NEW QUESTION # 48
In a GitHub repository using Dependabot, which of the following best describes the purpose of the .github/dependabot.yml file?
- A. It encrypts dependency versions before storing them in the repo.
- B. It lists commit SHAs to exclude from automatic pull requests.
- C. It configures scheduling, package ecosystems, and target directories for update checks.
- D. It enables GitHub to scan for secrets in dependency files.
Answer: C
Explanation:
The .github/dependabot.yml file defines Dependabot's package-ecosystem, the directories to inspect, and the update schedule (daily/weekly/monthly), controlling when and where Dependabot checks for new versions.
NEW QUESTION # 49
You are using GitHub-hosted runners and need to securely deploy to an internal system. The security team requires that these runners use IP address ranges that would not be shared with other companies. Which of the following approaches would meet their requirements?
- A. GitHub-hosted standard runners, using the IP addresses provided in "actions" from https://api.github.com/meta
- B. GitHub-hosted larger runners with static IP addresses
- C. GitHub-hosted standard runners, using the IP addresses provided in "api" from https://api.github.com/meta
- D. GitHub-hosted larger runners with Azure private networking
Answer: B
Explanation:
GitHub's larger runners let you reserve dedicated static IP addresses for your workflows - so you can allow-list those IPs in your firewall and be sure they aren't shared with any other tenant.
NEW QUESTION # 50
Our organization is updating its enterprise policies. Which of the following steps should you take to ensure alignment with security requirements?
- A. Regularly assess and adjust policies based on evolving risks.
- B. Maintain clear documentation of existing policies and policy changes.
- C. Implement changes without consulting stakeholders.
- D. Implement the new enterprise policies across the organization first and then consult with the security team to identify- any necessary adjustments or retrofits
Answer: B,D
NEW QUESTION # 51
Which of the following is a key benefit of setting default read permissions across organizations?
- A. Suits environments where all users need write access.
- B. Increases efficiency in content creation and updates.
- C. Enhances security by minimizing unintended modifications.
- D. Improves collaboration by allowing users to modify content directly.
Answer: C
Explanation:
Enforcing a default of Read for organization members ensures they can view content without the ability to push changes, reducing the risk of accidental or unauthorized modifications.
NEW QUESTION # 52
You have subscribed to GitHub Premium Support, and you need to submit a support ticket. GitHub Premium Support can help you with:
- A. writing scripts.
- B. integrating with third-party applications.
- C. setting up hardware.
- D. installing GitHub Enterprise Server.
Answer: D
Explanation:
GitHub Premium Support includes assistance with installing and using GitHub Enterprise Server, ensuring your deployment is configured correctly and any installation issues are resolved.
NEW QUESTION # 53
Your organization is implementing team synchronization. Which of the following should you prioritize during the setup process?
- A. Allowing manual updates to team memberships
- B. Disabling the audit log stream
- C. Setting an infrequent sync schedule to reduce performance impact
- D. Clearly define how identity provider groups will align with GitHub teams and roles
Answer: D
Explanation:
Before you enable team synchronization, you should clearly define how groups in your identity provider will map to GitHub teams and roles - ensuring that when the sync runs, users land in the correct teams with the right permissions.
NEW QUESTION # 54
Which of the following accurately contrasts a GitHub App and a GitHub Action?
- A. GitHub Actions are limited to reading repository content only
- B. GitHub Apps can only be used inside .github/workflows
- C. GitHub Apps run only on GitHub-provided virtual machines, while GitHub Actions run only on customer-hosted machines
- D. GitHub Actions can only be used to respond to events within a single repository while GitHub Apps can respond to events from multiple repositories
Answer: D
Explanation:
GitHub Actions workflows are defined and triggered within a single repository's context, whereas GitHub Apps are installed at the organization or user level and can subscribe to events across multiple repositories.
NEW QUESTION # 55
......
Pass Your GH-100 Dumps as PDF Updated on 2025 With 67 Questions: https://torrentpdf.actual4exams.com/GH-100-real-braindumps.html