GH-200 Exam Preparation Material | GitHub Actions

Prepare for the GH-200 with reliable study materials, practice questions, and key exam insights.

Prepare for the GH-200 GitHub Actions exam with CertQueen's independently developed study resources. Review important concepts, practice scenario-based questions, and use clear explanations to identify areas that require further study.

Question#1

You need to create new workflows to deploy to an unfamiliar cloud provider.
What is the fastest and safest way to begin?

A. Create a custom action to wrap the cloud provider's CL
B. Search GitHub Marketplace for verified actions published by the cloud provider.
C. Use the actions/jenkins-plugin action to utilize an existing Jenkins plugin for the cloud provider.
D. Search GitHub Marketplace for actions created by GitHub.
E. Download the CLI for the cloud provider and review the associated documentation.

Explanation:
Searching the GitHub Marketplace for verified actions published by the cloud provider is the quickest and safest approach. Many cloud providers offer verified GitHub Actions that are maintained and optimized to interact with their services. These actions typically come with the correct configurations and best practices, allowing you to get started quickly without reinventing the wheel.

Question#2

As a developer, you need to make sure that only actions from trusted sources are available for use in your GitHub Enterprise Cloud organization.
Which of the following statements are true? (Choose three.)

A. Specific actions can individually be enabled for the organization, including version information.
B. GitHub-verified actions can be collectively enabled for use in the enterprise.
C. Actions can be restricted to only those available in the enterprise.
D. Actions created by GitHub are automatically enabled and cannot be disabled.
E. Individual third-party actions enabled with a specific tag will prevent updated versions of the action from introducing vulnerabilities.
F. Actions can be published to an internal marketplace.

Explanation:
You can enable specific actions for the organization by identifying them and providing version control, ensuring only trusted versions are used in workflows.
GitHub-verified actions can be enabled at the enterprise level, providing an extra layer of security by ensuring that only trusted actions are available to workflows.
Actions can be published to an internal marketplace, allowing organizations to share reusable actions securely within their enterprise without exposing them to the public.

Question#3

You need to make a script to retrieve workflow run logs via the API.
Which is the correct API to download a workflow run log?

A. POST /repos/: owner/: repo/actions/runs/: run_id
B. GET /repos/: owner/: repo/actions/artifacts/logs
C. GET /repos/: owner/: repo/actions/runs/: run_id/logs
D. POST /repos/: owner/: repo/actions/runs/: run_id/logs

Explanation:
The GET /repos/: owner/: repo/actions/runs/: run_id/logs API endpoint is used to retrieve the logs of a specific workflow run identified by run_id. This is the correct method for downloading logs from a workflow run.

Question#4

Which of the following is the best way for an enterprise to prevent certain marketplace actions from running?

A. Create a list of the actions that are restricted from being used as an enterprise policy. Every other action can be run.
B. It is not possible; if an action is in the marketplace, its use cannot be restricted.
C. Create a list that is maintained as a. yml file in a. github repository specified in the enterprise. Only these actions can be run.
D. Create a list of the actions that are allowed to run as an enterprise policy. Only these actions can be run.

Explanation:
The best way for an enterprise to control which GitHub Actions run is by creating a list of approved actions as an enterprise policy. This approach restricts workflows to only use the actions that are explicitly allowed, ensuring security and compliance within the organization.

Question#5

As a DevOps engineer, you are developing a composite action. You have a step that needs to be executed against a subdirectory.
Which code snippet should you use within the composite action to specify the directory?

A. runs: using: "composite"steps:- run: $GITHUB_ACTION_PATH/script.shdirectory: ${{ inputs.dir }}shell: bash
B. runs: using: "composite"directory: ${{ inputs.dir }}steps:- run: $GITHUB_ACTION_PATH/script.shshell: bash
C. runs: using: "composite"working-directory: ${{ inputs.dir }}steps:- run: $GITHUB_ACTION_PATH/script.shshell: bash
D. runs: using: "composite"steps:- run: $GITHUB_ACTION_PATH/script.shworking-directory: ${{ inputs.dir }}shell: bash

Explanation:
For a composite action, commands are defined inside the runs.steps section of the action metadata file. When a specific command must execute from a particular folder, the correct key is working-directory, and it must be applied at the individual run step level.
Option D is correct because it keeps using: "composite" at the runs level and applies working-directory: ${{ inputs.dir }} directly to the step that runs the script.
Option A is incorrect because directory is not a valid GitHub Actions run-step key.
Option B incorrectly places directory at the runs level.
Option C uses the right keyword but places it at the wrong level. This tests composite action metadata syntax and correct step-level execution configuration.

Exam Code: GH-200
Q & A: 137 Q&As         Updated:  Nov 04,2026

 

 Access Complete GH-200 Preparation Material

What This GH-200 Study Resource Helps You Do

Review Key Concepts

Review the technologies, products, processes, and practical skills covered by the current GH-200 exam objectives.

Practice Scenario-Based Questions

Work through independently developed questions designed to strengthen your understanding of technical scenarios and decision-making.

Identify Knowledge Gaps

Use your results and the provided explanations to find weaker areas and focus your study more effectively.

How to Use This GH-200 Preparation Material

Review the Exam Scope

Start by reviewing the topics covered by the GH-200 exam. Compare them with the official exam objectives to understand the required technologies, operational tasks, and practical skills, then identify the areas that deserve the most attention.

Practice Independently

Complete a focused set of practice questions for each topic. On your first attempt, avoid referring to notes, answers, or other study resources so that you can evaluate your current understanding more accurately.

Study the Explanations

Review the answers and explanations after completing each practice session. Understand why the correct option is appropriate for the given scenario and why the other options may be incorrect or less suitable.

Close Knowledge Gaps

Keep track of incorrect answers, unfamiliar concepts, and weaker knowledge areas. Review these topics using official documentation and practical experience, then answer the related questions again to reinforce your understanding and monitor your progress.

Independent GH-200 Preparation Resource

CertQueen independently develops its certification study materials for educational purposes. The practice questions are not copied from, recalled from, or presented as live or official exam questions.

CertQueen is not affiliated with, endorsed by, sponsored by, or authorized by any certification provider. Certification names, exam codes, product names, and related trademarks are the property of their respective owners and are referenced only for identification and educational purposes.

Exam Code: GH-200
Q & A: 137 Q&As
Updated:  Nov 04,2026

 

 Access Complete GH-200 Preparation Material