Question 1

Which of the following is the responsibility of an Organization Owner in GitHub? (Choose three.)

Accepted Answer

Organization owners can view and edit billing information for the organization.
Organization owners may create new repositories in the organization without needing approval from other members.
Organization owners have full administrative control over organization settings, including configuring default repository permissions.

Question 2

You need GitHub to automatically notify a third-party service any time a new repository is created. You want to avoid writing custom code. The vendor has told you
that they have a tool in the GitHub Marketplace. Which type of tool do you need?

Accepted Answer

You need a GitHub App. Marketplace integrations that listen for events like repository.created and send notifications are delivered as GitHub Apps, since they can
subscribe to organization#level webhooks without you writing custom code.

Question 3

How does metered billing work in GitHub Enterprise Cloud with Enterprise Managed Users (EMU)?

Accepted Answer

Billing for GitHub Enterprise Cloud under metered (usage#based) billing is calculated by the total number of Enterprise Managed Users (and other
license#consuming accounts) in your enterprise - each EMU consumes a seat and contributes to the monthly bill.

Question 4

How does Dependabot determine which security update PRs to open?

Accepted Answer

Dependabot relies on your repository??s enabled Dependency Graph and Dependabot Alerts to identify vulnerable dependencies; it then automatically opens pull
requests to update to the patched versions that resolve those alerts.

Question 5

Our organization is updating its enterprise policies. Which of the following steps should you take to ensure alignment with security requirements?

Accepted Answer

Correct answer: AB

Question 6

How is CodeQL different from other static analysis tools?

Accepted Answer

CodeQL differs from traditional static analysis tools by ingesting your code into a queryable database and letting you write QL queries - its own database?style
language - to express semantic checks and find patterns across the codebase.

Question 7

You are planning GitHub account management for a healthcare organization with strict compliance requirements. Which THREE of the following statements
accurately describe GitHub Enterprise Managed Users (EMU) accounts? (Choose three.)

Accepted Answer

Enterprise Managed User accounts are provisioned and authenticated exclusively through your identity provider (for example, Azure?AD), so the IdP handles their
creation, attribute updates, and deprovisioning.
Managed user accounts cannot create public content or interact with repositories outside your enterprise; they're confined to private and internal repos within the
enterprise.
EMU accounts are owned and controlled by the enterprise (via the IdP) and cannot be converted into or unlinked as personal accounts outside that enterprise.

Question 8

When a token is used to perform actions across different GitHub resources, how is this reflected in audit logs?

Accepted Answer

Each API call authenticated with a token generates its own audit-log event, so you'll see a distinct entry for every action performed across different resources, each
annotated with the token's hashed ID, actor, and source IP.

Question 9

Which Git operation is not included in the Git activity audit log?

Accepted Answer

Delete branch operations aren't tracked as Git-activity events; the Git activity audit log only records Git events such as clone, fetch (pull), and push.

Question 10

What is the potential consequence of enabling multiple rulesets that apply to the same branch in a repository?

Accepted Answer

If you enable multiple rulesets that target the same branch, GitHub will evaluate every matching ruleset and enforce the aggregate of their rules - so all constraints
from all applicable rulesets apply.