GitHub Administration Practice Exam: Test Your Knowledge 2025

Your organization is setting up GitHub Enterprise Cloud and needs to enforce that all members use two-factor authentication (2FA). Which approach should you implement to meet this requirement?

A development team wants to ensure that all pull requests in their repository must pass status checks and have at least two approving reviews before merging. What GitHub feature should they configure?

Your company needs to scan repositories for exposed secrets like API keys and passwords. Which GitHub security feature should you enable?

You need to automatically assign pull request reviewers based on file paths modified in the pull request. What should you implement?

An organization wants to provide read access to all repositories for a group of contractors while maintaining strict access control. What is the most efficient approach?

Your organization uses GitHub Enterprise Cloud with SAML single sign-on (SSO). A team member reports they can no longer access organization repositories after authenticating. What is the most likely cause?

A company wants to ensure that all repositories in their organization automatically receive security updates for vulnerable dependencies. Which combination of features should they enable?

Your team needs to enforce that all commits in a repository are signed with GPG or S/MIME keys. What should you configure?

An organization wants to migrate from GitHub Enterprise Server to GitHub Enterprise Cloud. Which tool should they use to migrate repositories, issues, and pull requests?

You need to create a reusable workflow that can be called from multiple repositories in your organization. What is the correct approach?

Your organization needs to audit all administrative actions performed across the enterprise. Which GitHub feature provides comprehensive audit logging?

A development team wants to automatically label pull requests based on the files changed. What is the most appropriate solution?

Your organization has multiple teams working on different components of a monorepo. You need to ensure each team can only approve changes to their designated code areas. What should you implement?

An organization wants to prevent force pushes and branch deletions on their main branch across all repositories. What is the most scalable approach?

Your organization uses GitHub Enterprise Cloud and needs to restrict which GitHub Apps can be installed. What feature should you use?

A company is using GitHub Advanced Security and wants to automatically block pull requests that introduce high-severity code scanning alerts. What should they configure?

Your organization has a GitHub Enterprise Server instance and needs to configure it to authenticate users against an existing LDAP directory. Which authentication method should you configure?

An enterprise organization needs to ensure that all GitHub Actions workflows use only approved actions from verified creators or their own internal actions. They want to block all other third-party actions. What is the most comprehensive solution?

Your organization has multiple GitHub Enterprise Cloud organizations and wants to centrally manage users, teams, and policies across all of them. What should you implement?

A financial services company needs to ensure that GitHub Advanced Security findings are exported to their existing SIEM system for compliance reporting. The solution must provide real-time updates and include all security alerts. What is the best approach?