GH-100 Exam Preparation Material | GitHub Administration

Prepare for the GH-100 with reliable study materials, practice questions, and key exam insights.

Prepare for the GH-100 GitHub Administration exam with CertQueen's independently developed study resources. Review important concepts, practice scenario-based questions, and use clear explanations to identify areas that require further study.

Question#1

Which of the following are valid ways to pass data to a reusable workflow in a separate repository?

A. Use environment variables to pass data directly to the reusable workflow.
B. Define inputs in the reusable workflow and pass values from the calling workflow.
C. Define the secrets in the caller repository and call the reusable workflow using the ‘secrets’ keyword.
D. Define the secrets in the reusable workflow's repository and reference the secret using the ‘secrets’ context.

Explanation:
You declare named inputs in the reusable workflow’s on.workflow_call block and then pass values from the caller using the with keyword, allowing the called workflow to consume those parameters. You define required secrets in the caller repository and supply them to the reusable workflow via the secrets keyword in the workflow-call step, ensuring sensitive values are securely passed.

Question#2

How does Dependabot determine which security update PRs to open?

A. It waits for manual triage of all CVEs.
B. It uses the dependency graph and Dependabot alerts to open PRs for patched versions.
C. It reads the GitHub Issues and automatically suggests fixes.
D. It compares your codebase to the GitHub Trending list.

Explanation:
Dependabot relies on your repository’s enabled Dependency Graph and Dependabot Alerts to identify vulnerable dependencies; it then automatically opens pull requests to update to the patched versions that resolve those alerts.

Question#3

What is the effect of enforcing a policy that restricts GitHub Actions to only those created by the enterprise?

A. Marketplace actions are allowed only with SSO enabled
B. Actions can only be triggered by organization members
C. Only actions created within the enterprise are allowed
D. All public actions are allowed

Explanation:
When you enforce the “Allow enterprise actions and reusable workflows” policy, GitHub will block all workflows from using actions or reusable workflows that aren’t defined in a repository within your enterprise - so only actions created inside your enterprise are allowed.

Question#4

What is the key benefit of using a GitHub security advisory within a repository?

A. It automatically reverts commits that introduced the vulnerability.
B. It allows maintainers to privately disclose, discuss, and publish vulnerabilities.
C. It flags all forks of the repository as vulnerable.
D. It prevents users from cloning the repository until issues are resolved.

Explanation:
GitHub security advisories let maintainers privately disclose, discuss fixes, and then publish vulnerabilities in a controlled manner within the repository.

Question#5

You need GitHub to automatically notify a third-party service any time a new repository is created. You want to avoid writing custom code. The vendor has told you that they have a tool in the GitHub Marketplace.
Which type of tool do you need?

A. GitHub App
B. GitHub Copilot Extension
C. GitHub Models
D. GitHub Action

Explanation:
You need a GitHub App. Marketplace integrations that listen for events like repository.created and send notifications are delivered as GitHub Apps, since they can subscribe to organization-level webhooks without you writing custom code.

Exam Code: GH-100
Q & A: 65 Q&As         Updated:  Nov 02,2026

 

 Access Complete GH-100 Preparation Material

What This GH-100 Study Resource Helps You Do

Review Key Concepts

Review the technologies, products, processes, and practical skills covered by the current GH-100 exam objectives.

Practice Scenario-Based Questions

Work through independently developed questions designed to strengthen your understanding of technical scenarios and decision-making.

Identify Knowledge Gaps

Use your results and the provided explanations to find weaker areas and focus your study more effectively.

How to Use This GH-100 Preparation Material

Review the Exam Scope

Start by reviewing the topics covered by the GH-100 exam. Compare them with the official exam objectives to understand the required technologies, operational tasks, and practical skills, then identify the areas that deserve the most attention.

Practice Independently

Complete a focused set of practice questions for each topic. On your first attempt, avoid referring to notes, answers, or other study resources so that you can evaluate your current understanding more accurately.

Study the Explanations

Review the answers and explanations after completing each practice session. Understand why the correct option is appropriate for the given scenario and why the other options may be incorrect or less suitable.

Close Knowledge Gaps

Keep track of incorrect answers, unfamiliar concepts, and weaker knowledge areas. Review these topics using official documentation and practical experience, then answer the related questions again to reinforce your understanding and monitor your progress.

Independent GH-100 Preparation Resource

CertQueen independently develops its certification study materials for educational purposes. The practice questions are not copied from, recalled from, or presented as live or official exam questions.

CertQueen is not affiliated with, endorsed by, sponsored by, or authorized by any certification provider. Certification names, exam codes, product names, and related trademarks are the property of their respective owners and are referenced only for identification and educational purposes.

Exam Code: GH-100
Q & A: 65 Q&As
Updated:  Nov 02,2026

 

 Access Complete GH-100 Preparation Material