GitHub Administration practice questions
GitHub · GH-100 · 300 questions
Original practice questions for GitHub Administration.
This course contains the use of artificial intelligence.
Practice Quizzes
Test your knowledge with standard 20-question practice sets.
Quiz 1
Quiz 2
Quiz 3
Quiz 4
Quiz 5
Quiz 6
Quiz 7
Quiz 8
Quiz 9
Quiz 10
Quiz 11
Quiz 12
Quiz 13
Quiz 14
Quiz 15
Browse by Domain
Study specific topics at your own pace.
Domain 1: GitHub Enterprise Architecture & Installation · 46 questions
- Which GitHub Enterprise product runs entirely within your organization's own data center or private cloud?
- What is the minimum supported virtual machine memory (RAM) requirement for a single-node GitHub Enterprise Server instance supporting up to 3,000 users?
- When deploying GitHub Enterprise Server in a High Availability (HA) configuration, what is the role of the replica appliance?
- Which command-line utility is used to manage and configure a GitHub Enterprise Server appliance from the administrative shell?
- GitHub Enterprise Cloud differs from GitHub.com in that it adds which of the following enterprise-specific features?
- What is the purpose of the GitHub Enterprise Server Management Console?
- Which GitHub Enterprise Server feature allows you to create a geographically distributed cluster to serve users across multiple data centers?
- What is the purpose of the GitHub Connect feature between GitHub Enterprise Server and GitHub.com?
- During a GitHub Enterprise Server upgrade, which precaution is most important before beginning?
- What network ports must be accessible for GitHub Enterprise Server to function properly for HTTPS and Git access?
- What is the function of the 'ghe-repl-status' command in GitHub Enterprise Server?
- Which GitHub Enterprise deployment option is best suited for organizations that need GitHub functionality but cannot connect to the internet?
- What is the GitHub Enterprise Server 'maintenance mode' and when is it used?
- What GitHub Enterprise Server configuration allows an organization to use its own SSL/TLS certificate instead of the default self-signed certificate?
- How does GitHub Enterprise Server handle email notifications?
- What is the recommended approach for upgrading GitHub Enterprise Server from version 3.x to the next major version?
- What is the purpose of 'pre-receive hooks' in GitHub Enterprise Server?
- In a GitHub Enterprise Server cluster configuration, what is the role of a 'primary' datacenter?
- What is the GitHub Enterprise Server 'ghost user' and when does it appear?
- What is the minimum number of nodes required to run GitHub Enterprise Server in a supported cluster configuration?
- Which tool does GitHub recommend for migrating repositories and data from GitHub Enterprise Server to GitHub Enterprise Cloud?
- What does the 'ghe-config-apply' command do in GitHub Enterprise Server?
- What is 'GitHub Connect' and what does it enable between GitHub Enterprise Server and GitHub.com?
- What is the GitHub Enterprise Server 'replica' node and how does it differ from a cluster node?
- What GitHub Enterprise Server tool is used to restore from a backup?
- What does the 'ghe-repl-status' command show in a GitHub Enterprise Server HA setup?
- What are the hardware requirements considerations for GitHub Enterprise Server sizing?
- What is the GitHub Enterprise Server 'nomad' and 'consul' service and why are they important?
- How does GitHub Enterprise Server handle SSL/TLS certificate configuration?
- What is 'GitHub Enterprise Server Actions' caching and what storage does it use?
- An administrator must fail over a GitHub Enterprise Server high-availability pair after the primary appliance becomes unrecoverable. Which command is run on the replica to promote it to the new primary?
- While GitHub Enterprise Server is in maintenance mode, which user-facing capability remains available for troubleshooting?
- A GHES administrator needs to upload a custom TLS certificate for the appliance hostname. Which interface is the primary place to configure and apply that certificate?
- After GitHub Connect is established between GHES and GitHub.com, which two features can administrators selectively enable? (Choose two)
- By default, which network port is used for administrative SSH access to a GitHub Enterprise Server appliance (distinct from user Git SSH)?
- Before relying on a GHES replica as a warm spare, which operational check is most important on an ongoing basis?
- Why might a GHES administrator configure external blob/object storage for the appliance?
- In a GHES deployment fronted by a load balancer for high availability, what should health checks primarily verify before sending user traffic to a node?
- In GitHub Enterprise Server, how does a high-availability (HA) replica differ from a node in a multi-node cluster for production traffic?
- When provisioning a GitHub Enterprise Server virtual machine, which storage design best supports performance and safe expansion of user data?
- Which statement correctly describes the primary relational database used by GitHub Enterprise Server for application metadata?
- Which two outcomes does a correctly configured github/backup-utils snapshot of GitHub Enterprise Server provide for disaster recovery? (Choose two.)
- What is the primary purpose of the ghe-speak utility on a GitHub Enterprise Server appliance?
- An administrator is adding a new high-availability replica to an existing GitHub Enterprise Server primary. Which step is essential in the supported HA setup process?
- What business and technical goal does geographic replication address for GitHub Enterprise Server deployments?
- An organization must replace the default self-signed certificate on GitHub Enterprise Server with a corporate TLS certificate. Where do administrators typically apply this change?
Domain 2: Authentication, Authorization & Security · 74 questions
- What SAML attribute is required in the SAML assertion when configuring SAML SSO for a GitHub organization?
- When a GitHub organization enables SAML SSO, what happens to members who have not yet authenticated via SAML?
- What is the difference between OAuth Apps and GitHub Apps when accessing GitHub resources?
- What is the purpose of configuring an IP allow list for a GitHub organization or enterprise?
- Which type of token should an administrator use to authenticate GitHub Actions workflows with fine-grained, repository-scoped permissions?
- What is the primary security benefit of using GitHub's secret scanning feature in an organization?
- An organization uses LDAP for authentication. What is the function of LDAP group sync in GitHub Enterprise Server?
- What is Enterprise Managed Users (EMU) in GitHub Enterprise Cloud?
- Which permission level in GitHub allows a user to push to protected branches and manage repository settings?
- What is the purpose of a GitHub Deploy Key?
- What does enabling 'Require two-factor authentication' at the organization level do to members who don't have 2FA enabled?
- Which GitHub feature allows you to define which individuals or teams must review a pull request before it can be merged?
- What is the function of GitHub's code scanning feature?
- What is the difference between organization-level SAML SSO and enterprise-level SAML SSO in GitHub?
- What is SCIM, and how is it used with GitHub Enterprise Cloud?
- What is the purpose of a fine-grained Personal Access Token (PAT) in GitHub?
- How can an organization owner verify that all organization members are using SAML SSO?
- What is the security risk of using a Personal Access Token with 'repo' scope for GitHub API access?
- What are 'protected tags' in GitHub, and what do they prevent?
- What is the purpose of GitHub's 'Verified domains' feature for organizations?
- What does GitHub's 'Dependabot security updates' feature do when it detects a vulnerability?
- What GitHub feature allows you to restrict which OAuth Apps can access your organization's data?
- What is the purpose of an 'allowlist' for GitHub Actions in an organization?
- In GitHub, what is a 'Security policy' (SECURITY.md file) and what is its purpose?
- What is GitHub's private vulnerability reporting feature?
- What is the 'bypass list' feature in GitHub repository rulesets?
- What GitHub security feature automatically enables two-factor authentication for all members when an enterprise requires it?
- What is the difference between 'authentication' and 'authorization' in the context of GitHub access control?
- What is the GitHub 'Codespaces' security consideration for enterprises, and what policies can admins configure?
- What is the purpose of GitHub's 'token scanning' feature for GitHub Apps and OAuth tokens?
- Which GitHub branch protection setting prevents repository administrators from bypassing required status checks?
- What is 'organization-owned' versus 'user-owned' for GitHub Apps?
- What is GitHub Enterprise's 'private mode' setting in GitHub Enterprise Server?
- What does it mean to 'verify' a commit signature in GitHub?
- What is the GitHub 'Dependabot version updates' configuration file and where is it placed?
- What is the 'secret scanning' custom patterns feature in GitHub Advanced Security?
- What is the purpose of a GitHub 'machine user' account for automation?
- How does GitHub handle SSH key management for GHES instances where users must use corporate SSH keys only?
- What is the 'user provisioning' aspect of SCIM in GitHub Enterprise Cloud?
- What is the GitHub 'security policy' file (SECURITY.md) and what does it do?
- What does GitHub's 'push protection' for secret scanning do, and how can it be bypassed?
- What is a GitHub 'fine-grained personal access token' and how does it differ from classic PATs?
- What is the 'Verified & Approved' designation for GitHub Actions in an enterprise?
- What is 'IP allow listing' at the GitHub Enterprise Cloud level and what does it restrict?
- What is 'conditional access' in the context of GitHub Enterprise Managed Users?
- What is the difference between GitHub organization 'base permissions' and team permissions?
- What happens to a GitHub Actions workflow's permissions when it accesses a repository from a fork PR?
- What is 'security hardening' for GitHub Actions self-hosted runners?
- What is 'OpenID Connect (OIDC)' in GitHub Actions and what problem does it solve?
- What are 'deploy keys' in GitHub repositories and when should they be used?
- How do Enterprise Managed Users (EMU) typically differ from ordinary GitHub.com users regarding collaboration outside the enterprise?
- An enterprise wants to use OpenID Connect (OIDC) for enterprise SSO instead of SAML. What is a primary administrative characteristic of OIDC enterprise SSO on GitHub?
- When a member creates a fine-grained personal access token that targets organization resources, what enterprise/organization control commonly applies before the token can access those resources?
- An enterprise enables an IP allow list. Which two statements correctly describe common interactions with GitHub Apps and automation? (Choose two)
- What is a security benefit of enterprise policies that restrict or disable classic personal access tokens in favor of fine-grained PATs?
- What does uploading an SSH certificate authority (CA) to a GitHub organization enable administrators to do?
- When SAML single sign-on is enforced for an organization, what additional step may users face when performing sensitive account or organization actions?
- In an EMU environment using SCIM, what is the expected outcome when a user is deprovisioned in the identity provider?
- What are GitHub organization-level code security configurations primarily used for?
- An organization requires approval for GitHub App installations. What does this control achieve?
- What do secret scanning validity checks help security teams understand when a secret is detected?
- What is the main administrative purpose of synchronizing IdP groups to GitHub teams (team synchronization)?
- How does just-in-time (JIT) SAML provisioning differ from SCIM-based user provisioning for GitHub Enterprise Cloud organizations?
- In an Enterprise Managed Users (EMU) environment, what is the role of IdP conditional access policies (CAP) relative to GitHub access?
- Why might an enterprise administrator shorten SAML-authorized session lifetime for members accessing GitHub Enterprise Cloud with SSO?
- Which two controls help an enterprise reduce risk from credentials used on unmanaged endpoints? (Choose two.)
- What does an organization policy that restricts the invitation of outside collaborators primarily control?
- An organization enables OAuth App access restrictions. What is the immediate administrative effect?
- What advantage do SSH certificate authorities configured for a GitHub Enterprise offer compared with unmanaged long-lived user SSH keys alone?
- When an enterprise enables an IP allow list, which additional consideration is important for installed GitHub Apps and integrations?
- An organization requires two-factor authentication. What should administrators ensure members understand about 2FA recovery codes?
- How does the enterprise billing manager role differ from the enterprise owner role on GitHub Enterprise Cloud?
- Why are fine-grained GitHub App installation permissions preferred over a single classic PAT with broad repo scope for organization automation?
- After SAML SSO is enforced for an organization, what must a member typically do before using a personal access token or SSH key against organization resources that require SSO authorization?
Domain 3: Repository & Organization Management · 60 questions
- What is the maximum number of organization owners GitHub recommends for most organizations?
- What does the 'Billing Manager' organization role allow a user to do?
- How does a CODEOWNERS file affect the pull request review process?
- What is the difference between a repository ruleset and a branch protection rule in GitHub?
- What happens when an organization's repository is forked by a member?
- Which GitHub feature allows organizations to define template repositories that users can use as starting points for new repositories?
- In GitHub, what is the purpose of a team's 'maintainer' role?
- What is the 'internal' repository visibility setting, and which GitHub product supports it?
- What does the 'Archive repository' action do in GitHub?
- How does GitHub's 'Require signed commits' branch protection rule work?
- What is the difference between 'outside collaborators' and 'organization members' in GitHub?
- What is the purpose of GitHub's 'base permissions' setting for an organization?
- How can an organization restrict which users are allowed to create repositories?
- What is the purpose of GitHub's 'mandatory code review dismissal' feature in branch protection?
- What is a GitHub organization's 'fork policy' and what does restricting it accomplish?
- What is the GitHub 'Merge Queue' feature and what problem does it solve?
- How does GitHub handle repository transfers between organizations?
- What is GitHub Copilot Business, and what administrative controls are available for enterprise administrators?
- What is the purpose of a GitHub 'team discussion' feature?
- What happens to forked repositories when the parent repository is deleted?
- What is the 'GitHub Sponsors for companies' feature and how can organizations use it?
- What is the purpose of GitHub's 'saved replies' feature for repository maintainers?
- How do GitHub organization-level secrets differ from repository-level secrets in GitHub Actions?
- What is the 'watch' functionality in GitHub repositories and how does it affect notifications?
- What is the purpose of GitHub's 'Required workflows' feature at the organization level?
- In GitHub, what is a 'milestone' and how is it used for project tracking?
- What is the function of GitHub's 'auto-link references' feature in organizations?
- What does the 'Allow auto-merge' setting in a repository do?
- How does GitHub's 'Require branches to be up to date before merging' protection work?
- What is a GitHub 'project' (GitHub Projects) and how does it differ from issues?
- What is the GitHub 'issue template chooser' and how is it configured?
- What is the purpose of 'GitHub Copilot for Business' and what can administrators control?
- How does GitHub handle the 'inner source' model using repository visibility settings?
- What is the 'repository network' in GitHub and how do forks relate to it?
- What is the GitHub 'Merge Queue' and what problem does it solve?
- What are 'GitHub Actions environments' and how do they provide deployment protection?
- What is the GitHub 'repository transfer' feature and what happens to existing links after transfer?
- What is the GitHub 'organization profile README' and where does it display?
- What is the GitHub 'repository ruleset' status and how does it differ from branch protection rules status?
- What does the 'Restrict deletions' rule in GitHub repository rulesets or branch protection do?
- Compared with classic branch protection rules, what advantage do repository rulesets provide for administrators?
- What is the purpose of setting a repository ruleset enforcement status to 'Evaluate' (when available)?
- Which two uses of repository custom properties are valuable for enterprise administrators? (Choose two)
- What can push rulesets help prevent at the repository or organization level?
- When administering a merge queue for a busy repository, what must typically be true for a pull request to be merged by the queue?
- Why would an administrator create rulesets that apply to tags?
- What is a responsible use of a ruleset bypass list in an organization?
- An enterprise policy prevents members from changing repository visibility. What risk does this primarily reduce?
- How do CODEOWNERS and required reviews commonly work together in a governed repository?
- When an organization renames the default branch across repositories (for example master to main), what administrative concern is most important?
- An organization sets base permissions to 'No permission'. What is the practical effect for members who are not granted access through teams or direct collaborator assignments?
- Why would enterprise or organization administrators restrict who can create repositories?
- Which two outcomes should administrators plan for when transferring a repository to another account or organization? (Choose two.)
- What is the primary effect of archiving a GitHub repository for ongoing development work?
- What does setting a repository or organization ruleset enforcement status to 'Evaluate' (or equivalent non-enforcing mode) allow administrators to do?
- What is the main operational benefit of synchronizing IdP groups to GitHub teams?
- In GitHub Enterprise Cloud with an enterprise account, what does 'internal' repository visibility enable for inner-source practices?
- How can organization or enterprise custom repository properties help administrators govern large repository fleets?
- When administrators rename a repository default branch, which follow-up is most important for enterprise stability?
- An organization restricts forking of private repositories. What risk is this policy primarily intended to reduce?
Domain 4: GitHub Actions & Automation · 60 questions
- What are GitHub Actions self-hosted runners, and why might an organization choose them over GitHub-hosted runners?
- What is the purpose of the 'workflowdispatch' event in GitHub Actions?
- In GitHub Actions, what is the difference between 'jobs' running in sequence versus in parallel?
- What is a GitHub Actions composite action, and how does it differ from a JavaScript action?
- What is the purpose of GitHub Actions environments, and what feature do they provide for deployment workflows?
- How does GitHub Actions handle secrets, and what is the maximum size of a secret value?
- What is GitHub Actions' matrix strategy used for?
- What is GitHub Packages, and what registries does it support?
- What is the purpose of workflow concurrency control in GitHub Actions?
- Which GitHub Actions permission allows a workflow to create and update issues and pull requests?
- What is a reusable workflow in GitHub Actions and how is it different from a composite action?
- How do GitHub Actions runner groups help organizations manage self-hosted runner access?
- What is the 'GITHUBTOKEN' permission model for GitHub Actions workflows triggered by pull requests from forks?
- What is the purpose of the 'cache' action in GitHub Actions workflows?
- What does the 'if' conditional in a GitHub Actions job or step do?
- What is the 'GITHUBENV' file used for in GitHub Actions?
- What is the maximum job execution timeout for GitHub-hosted runners in GitHub Actions?
- What is GitHub Actions' 'artifact' feature and how does it differ from the cache feature?
- What is the purpose of 'required status checks' in branch protection rules?
- How can GitHub Actions workflows authenticate to external cloud providers (AWS, Azure, GCP) without storing long-lived credentials as secrets?
- What is the 'pullrequesttarget' event in GitHub Actions and when should it be used carefully?
- What GitHub Actions feature allows you to call a workflow defined in another repository?
- What is the purpose of 'default working directory' and 'default shell' settings in GitHub Actions?
- What is a GitHub Actions 'ephemeral' self-hosted runner and what problem does it solve?
- How do GitHub Actions 'workflow templates' benefit organizations?
- What is the 'permissions' key at the workflow level vs the job level in GitHub Actions?
- What is the 'GitHub Actions usage report' and what does it show enterprise administrators?
- What does the 'continue-on-error' setting do in a GitHub Actions job or step?
- What is the GitHub Actions 'Large Runner' feature?
- What is 'GitHub Actions Importer' and what does it help organizations do?
- What is the GitHub Actions 'runner group' and how are they used in enterprises?
- What is the 'workflowdispatch' event in GitHub Actions and when would you use it?
- What does 'timeout-minutes' do in a GitHub Actions job or step?
- What are 'GitHub Actions composite actions' and when should they be used over reusable workflows?
- What is the GitHub Actions 'schedule' trigger and what format does it use?
- What is the GitHub Actions 'concurrency' setting and what problem does it solve?
- What is a GitHub Actions 'job matrix' and what does it enable?
- What is 'GITHUBOUTPUT' in GitHub Actions and how is it used?
- What is the purpose of 'github.event' context in GitHub Actions workflows?
- What is the GitHub Actions 'jobs.<jobid>.needs' configuration and how does it affect job execution?
- How are GitHub-hosted larger runners typically billed for GitHub Actions compared with standard GitHub-hosted runners?
- When configuring cloud provider access from GitHub Actions using OIDC, what should cloud IAM trust policies typically validate?
- Which two statements correctly describe GitHub artifact attestations in Actions workflows? (Choose two)
- When should an administrator store a value as an Actions secret rather than a configuration variable?
- How can an enterprise limit which repositories may use expensive larger runners?
- What does secrets: inherit accomplish when a caller workflow invokes a reusable workflow?
- What is the effect of configuring a wait timer on a GitHub Actions environment protection rule?
- Why do many enterprises set the default GITHUBTOKEN workflow permissions to read-only at the organization or enterprise level?
- What can repository or organization administrators configure regarding Actions artifacts?
- What insight do GitHub Actions usage metrics/reports primarily provide enterprise administrators?
- Why should enterprise administrators set the default GITHUBTOKEN workflow permissions to read-only at the organization or enterprise level?
- What trust consideration is most important when allowing repositories to call reusable workflows from other organizations?
- How do runner group visibility settings help secure self-hosted runners in an enterprise?
- Which two statements correctly describe GitHub Actions cache behavior that administrators should plan for? (Choose two.)
- What administrative capability do GitHub Actions environment protection rules provide for production deployments?
- What is the primary security benefit of using OpenID Connect (OIDC) federation from GitHub Actions to cloud providers instead of storing long-lived cloud access keys as repository secrets?
- What problem do organization-required workflows (or equivalent required CI policy mechanisms) aim to solve for enterprise administrators?
- Why should administrators configure organization-level retention policies for GitHub Actions artifacts and logs?
- Why might an organization require approval before GitHub Actions workflows run from first-time contributors' pull requests, especially on public repositories?
- What security problem do ephemeral self-hosted runners primarily address compared with long-lived persistent runner hosts?
Domain 5: Compliance, Audit & Support · 60 questions
- What information does the GitHub Enterprise audit log capture?
- What is Dependabot, and what three features does it provide in GitHub?
- How long does GitHub Enterprise Cloud retain audit log data by default?
- What is GitHub Advanced Security (GHAS), and which features does it include?
- What is GitHub's 'push protection' feature in secret scanning?
- Which GitHub feature provides a software bill of materials (SBOM) for repository dependencies?
- What is the GitHub Advisory Database?
- What does the GitHub Enterprise backup utility (github/backup-utils) back up?
- What is the purpose of GitHub Enterprise's 'dormant user' feature?
- What GitHub feature allows you to stream audit log events to external systems in real time?
- What is the GitHub Enterprise Server site admin panel, and who has access to it?
- What does GitHub's 'dependency review' feature provide in pull requests?
- What is the GitHub Enterprise license model, and what happens when the user count exceeds the licensed seat count?
- What information is included in a GitHub Security Advisory?
- How does GitHub's compliance with SOC 2 Type II benefit enterprise customers?
- What is the GitHub Enterprise 'consumption' model for GitHub Actions minutes?
- What does the GitHub Enterprise 'legal hold' capability allow administrators to do?
- What GitHub feature enables administrators to view aggregate statistics on how GitHub Enterprise is being used across the organization?
- What is a GitHub Enterprise 'server statistics' feature when GitHub Connect is enabled?
- How should GitHub Enterprise administrators handle a security incident where a user's account may be compromised?
- What is the GitHub Enterprise 'organization insights' feature?
- What is the GitHub Enterprise 'Security Overview' and what does it aggregate?
- What does the GitHub Enterprise audit log 'hashedtoken' field indicate?
- What is GitHub's 'secret scanning alert' lifecycle and what statuses can an alert have?
- What is the GitHub Enterprise 'enterprise-level repository policy' and what can it control?
- What GitHub feature provides a searchable, filterable view of all Dependabot alerts across an enterprise?
- What is a GitHub 'repository security advisory' and what does it publish?
- What is the GitHub Enterprise 'Managed Accounts and Directory Sync' approach for SAML enterprises that don't use EMU?
- What does 'ghe-license' command do in GitHub Enterprise Server?
- What is GitHub's 'Artifact attestation' feature for GitHub Actions?
- What is the 'GHES admin stats' API endpoint and what data does it provide?
- What does 'audit log streaming' to an external SIEM provide that standard audit log export does not?
- What is the GitHub 'advisory database' and how does it contribute to Dependabot alerts?
- What is a GitHub Enterprise 'support bundle' and when is it collected?
- What is the GitHub 'Dependency Graph' feature and what is its relationship to Dependabot?
- What GitHub compliance feature allows generating a Software Bill of Materials (SBOM)?
- What is the purpose of GitHub's 'code scanning default setup' feature?
- What is GitHub Enterprise's 'dormant user' feature and how does it relate to licensing?
- What is the GitHub Enterprise 'verified domain' feature for organizations?
- What does GitHub Enterprise's 'token lifetime' policy for fine-grained PATs control?
- What is a primary benefit of configuring audit log streaming to an external destination?
- Which two practices help GitHub Enterprise support tickets get appropriate handling? (Choose two)
- Why might an enterprise automation use GitHub usage metrics APIs or usage reports programmatically?
- When GitHub Support requests a GHES support bundle, what should administrators understand about it?
- How does one-time audit log export differ from continuous audit log streaming?
- What do GitHub Advanced Security license usage views help administrators manage?
- What operational question does the enterprise Security Overview primarily help answer?
- Which two GitHub artifacts commonly support external compliance audits? (Choose two)
- What should administrators evaluate when adopting GitHub Enterprise Cloud features related to data residency?
- During an incident where a GitHub App's private key or high-privilege credentials may be leaked, what should administrators do first?
- How can Dependabot auto-triage rules help security teams manage high volumes of dependency alerts across an enterprise?
- When should an organization prefer code scanning advanced setup over default setup for GitHub Advanced Security?
- What operational value do secret scanning validity checks provide when GitHub partners confirm whether a detected credential is still active?
- Why would an enterprise use the GitHub audit log GraphQL API in addition to the web UI export when building a compliance evidence pipeline?
- Which two GitHub Enterprise capabilities most directly help an organization produce ongoing compliance evidence for access and configuration changes? (Choose two.)
- An operations team opens a GitHub Support case for a GitHub Enterprise Server outage with intermittent 500 errors after a configuration change. When is generating a support bundle most appropriate?
- How should enterprise administrators use a legal hold when litigation or investigation requires preserving a user's GitHub-related content?
- What should administrators verify when configuring enterprise audit log streaming to an external destination such as Azure Blob, S3, or a SIEM-compatible endpoint?
- A finance stakeholder needs monthly invoice access and spending visibility for GitHub Enterprise Cloud without the ability to change enterprise security policies. Which assignment best matches least privilege?
- How does the enterprise Security Overview support compliance and risk reporting for GitHub Advanced Security programs?
These questions are original practice material and are NOT actual exam questions or brain-dump content. All vendor marks are trademarks of their respective owners. This site is not affiliated with, endorsed by, or sponsored by the exam vendor.