GH-200 Practice Questions & Answers • ExamPrepare

Question 1

You have a GitHub repository named Repo1. Repo1 uses GitHub Actions workflows that upload build artifacts.

You plan to change the artifact and log retention period to 30 days.

You need to remove expired GitHub Actions artifacts from Repo1. The solution must explicitly identify and delete existing expired artifacts by using the REST API.

How should you complete the script? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question 2

Which YAML configuration will trigger a GitHub Actions workflow when a push is made to the main branch and a pull request is opened or synchronized on that branch?

on: pull_request: branches: - develop push: branches: - main
on: push: branches: - master pull_request: branches: - main
on: push: branches: - main pull_request: branches: - main
on: push: branches: - main pull_request: branches: - dev

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

You have a GitHub repository that contains reusable custom actions.

You need to configure the following steps:

provision-cli: Uses a specific Linux base image and pinned versions of operating system packages and command-line tools
build-wrapper: Combines two shell commands and a checkout action into a single reusable workflow step

Which type of action should you use for each step? To answer, drag the appropriate action types to the correct steps. Each type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Actions

Answer Area

provision-cli:

build-wrapper:

Question 4

What are two reasons to keep an action in its own repository instead of bundling it with other application code? Each correct answer presents a complete solution.

NOTE: Each correct answer is worth one point.

It decouples the action's versioning from the versioning of other application code.
It allows sharing workflow secrets with other users.
It widens the scope of the code base for developers fixing issues and extending the action.
It makes the action.yml file optional.
It makes it easier for the GitHub community to discover the action.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

As a developer, you need to make sure that only actions from trusted sources are available for use in your GitHub Enterprise Cloud organization.

Which three statements are true? Each correct answer presents a complete solution.

NOTE: Each correct answer is worth one point.

Actions created by GitHub are automatically enabled and cannot be disabled.
Specific actions can individually be enabled for the organization, including version information.
Actions can be published to an internal marketplace.
Individual third-party actions enabled with a specific tag will prevent updated versions of the action from introducing vulnerabilities.
GitHub-verified actions can be collectively enabled for use in the enterprise.
Actions can be restricted to only those available in the enterprise.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

In which two scenarios could the GITHUB_TOKEN be used? Each correct answer presents a complete solution.

NOTE: Each correct answer is worth one point.

to read from the file system on the runner
to create a repository secret
to create issues in the repo
to publish to GitHub Packages
to leverage a self-hosted runner
to add a member to an organization

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.