Practice Free GH-900 GitHub Foundations Exam Questions Answers With Explanation

GitHub Copilot for Business offers several features that are tailored to the needs of organizations, providing more control, security, and support compared to the individual version.

Organization-wide Policy Management:

Option B is correct because Copilot for Business allows organizations to manage policies across their entire user base, providing control over how Copilot is used within the organization.

Blocking Suggestions Matching Public Code:

Option C is correct because Copilot for Business includes enhanced security features, such as blocking code suggestions that match public code to prevent inadvertent use of unlicensed code.

Support for Organization or Enterprise GitHub Accounts:

Option E is correct because Copilot for Business supports integration with GitHub Enterprise accounts, offering additional administrative controls and integration capabilities.

Incorrect Options:

Option A (multi-line function suggestions) is a feature available in both individual and business versions, so it does not differentiate the business offering.

Option D (VPN proxy support via self-signed certificates) is not a primary differentiator of Copilot for Business.

Option F (plugs directly into the editor) is true for both individual and business versions, so it is not unique to Copilot for Business.

In GitHub Actions workflows, actions can be referenced from various sources depending on the needs of the workflow.

Any Public Repository:

Option A is correct. Actions can be referenced from any public GitHub repository, allowing the reuse of shared actions across multiple projects.

The Same Repository as Your Workflow File:

Option B is correct. Actions stored in the same repository as the workflow file can be referenced directly, which is common for custom actions specific to that project.

A Published Docker Container Image on Docker Hub:

Option E is correct. Workflows can reference actions that are provided as Docker container images hosted on Docker Hub, allowing integration of complex tools and environments.

Incorrect Options:

Option C (GitHub Packages) is incorrect as it is more commonly used for storing and managing dependencies, not actions.

Option D (An enterprise marketplace) is incorrect because GitHub Actions are not directly referenced from an enterprise marketplace but rather from public repositories or Docker images.

GitHub Copilot is described as an AI pair programmer that offers autocomplete-style suggestions. It is a tool integrated into development environments like Visual Studio Code that helps developers by providing code suggestions as they type. Copilot can suggest entire lines or blocks of code based on the context of what you’re writing, making it a valuable assistant in coding, but not a replacement for developers.

=================

InnerSource applies open source collaboration practices inside an organization while keeping the work internal. Its primary goal is to make company projects more visible to employees and reduce friction when teams contribute across boundaries. Instead of every team working in isolation, InnerSource encourages shared ownership, discoverable repositories, clear contribution guidelines, issues, pull requests, and code reviews. This helps employees reuse existing solutions, avoid duplicated work, and collaborate more efficiently. Unlike open source, InnerSource does not require making repositories public or accepting outside contributors. It also does not remove the need for pull requests; pull requests are often central to the contribution process. The key difference is that InnerSource focuses on internal collaboration using open source-style practices.

Git is a widely-used version control system that has several defining features:

Distributed Version Control:

Git is a distributed version control system, meaning that every developer has a full copy of the entire repository, including its history, on their local machine. This enables greater flexibility, as work can be done offline and each user has access to the full project history.

Open Source Software:

Git is open-source, meaning its source code is freely available for use, modification, and distribution. This fosters a large community of users and contributors who continuously improve the software.

Efficiency with Large Projects:

Git is designed to handle projects of any size with speed and efficiency. It can manage large codebases and many contributors without significant performance degradation, making it suitable for everything from small personal projects to large, complex software systems.

Incorrect Options:

Option B is incorrect because Git is not a sequential version control system, nor is it inherently tied to cloud-based services. GitHub, GitLab, and other platforms offer cloud hosting for Git repositories, but Git itself is a version control tool.

Option C is incorrect because Git is not limited to small projects; it is designed to scale efficiently, and the other features mentioned are only partial descriptions of Git ' s capabilities.

Option D is incorrect because Git is not a centralized version control system; it is distributed. Additionally, Git is open-source, not proprietary, and is used for projects of all sizes.

A gist on GitHub is essentially a Git repository, albeit a simplified one, designed for sharing snippets of code, notes, or other text content. Gists support version control and can be public or secret.

Gist as a Git Repository:

Option B is correct because each gist is a Git repository, meaning you can clone it, commit changes, and even fork it, just like any other Git repository.

Incorrect Options:

Option A is incorrect because a gist is not an app; it’s a feature of GitHub that provides a simplified repository.

Option C is incorrect because while a gist may contain Markdown documents, it is fundamentally a repository that can hold various file types.

Option D is incorrect because GitHub Pages is a separate service for hosting websites, not related to gists.

The following two-factor authentication (2FA) methods can be used to secure a GitHub account:

A. Authenticator app : You can use an authenticator app (like Google Authenticator or Authy) to generate time-based one-time passwords (TOTP) for logging in.

C. GitHub mobile : The GitHub mobile app can also be used to receive 2FA codes, adding convenience for users who prefer to manage everything from their mobile devices.

D. Security keys : Physical security keys (such as YubiKeys) can be used as a strong form of 2FA, requiring physical access to the key to authenticate.

Security questions and Single sign-on (SSO) are not considered 2FA methods in the context of GitHub account security.

=================

GitHub Desktop is a local desktop application that provides a graphical user interface for common Git operations. Instead of using the command line, users can clone repositories, create branches, commit changes, view diffs, and push or pull changes through a visual interface. It does not replace github.com because many collaboration features, such as repository settings, advanced pull request review, issues, discussions, organizations, and security administration, are still handled through GitHub.com. GitHub Desktop is also not a self-hosted GitHub server and is not limited only to Windows, because it is available for both Windows and macOS. Its main purpose is to simplify local Git repository management for users who prefer a GUI over command-line Git.

GitHub Secret Scanning helps protect repositories by detecting committed credentials and other sensitive values that should not be exposed in source code. SSH private keys are sensitive because they can allow unauthorized access to servers or repositories. API keys are also critical because they can grant access to external services, cloud platforms, or applications. Database connection strings may expose usernames, passwords, hosts, or database endpoints, making them dangerous if leaked. Secret Scanning is designed to identify these kinds of credential patterns and alert repository maintainers or security teams. Hardcoded email addresses are usually not treated as secrets, and code formatting issues are handled by linters or code quality tools, not Secret Scanning.

After 30 minutes of inactivity, a GitHub Codespace will time out. This is designed to conserve resources when the Codespace is not being actively used. The session will be paused, and you ' ll need to reconnect to resume your work. However, the Codespace is not deleted, and any unsaved changes might not be lost but should be committed or saved to prevent data loss.

=================

GitHub Pages is a feature provided by GitHub that allows you to create webpages hosted and published through GitHub repositories. It is commonly used for hosting project documentation, personal websites, or blogs directly from a GitHub repository. It integrates seamlessly with the repository, making it easy to deploy and manage website content.

=================

The terms Alpha and Beta are often used in software development to describe different stages of feature testing and release.

Alpha Features:

Option A is correct because Alpha features are typically in the early stages of development and are not available to the public. They are usually tested internally or by a limited audience.

Incorrect Options:

Option B is incorrect because Alpha features are often undocumented as they are in the early development phase.

Option C is incorrect because Alpha and Beta features usually do not offer Service Level Agreements (SLAs) due to their experimental nature.

Option D is incorrect because Beta features might offer limited support, but it is not guaranteed, especially compared to fully released features.

GitHub supports special closing keywords that connect a pull request to an issue and automatically close the issue when the pull request is merged into the default branch. Examples include keywords such as “fixes,” “closes,” or “resolves,” followed by the issue number. Using a reference like Fixes #42 in the pull request description tells GitHub that the pull request resolves that issue. Assigning the issue to the pull request author does not create automatic closure behavior. Mentioning the issue after merging may create a reference, but it does not automatically close the issue retroactively. Adding the issue number to the pull request title may help humans understand the relationship, but the supported automatic closing behavior depends on the keyword reference.

GitHub automatically subscribes users to conversations when their direct involvement indicates they may need future notifications. Being at-mentioned in a thread subscribes the mentioned user because GitHub treats the mention as a direct request for attention. Opening a pull request also subscribes the author because they own the proposed change and need updates about reviews, comments, checks, and merge activity. Commenting on an issue or pull request subscribes the commenter because they have participated in the conversation and may need follow-up notifications. Deleting a branch does not represent participation in a specific conversation, and changing repository visibility is an administrative repository action rather than a conversation-level activity. Automatic subscriptions help users stay informed about discussions relevant to them.

GitHub Desktop is a standalone application that provides a graphical user interface (GUI) for interacting with GitHub repositories, as opposed to the command-line or web-based interfaces available on github.com.

Graphical User Interface:

Option D is correct because GitHub Desktop offers a GUI, making it easier for users to manage repositories, perform commits, and handle other Git-related tasks without needing to use the command line.

Incorrect Options:

Option A is partially correct in that GitHub Desktop is a standalone application, but the key difference is the GUI.

Option B is incorrect because GitHub Desktop does not specifically enable integration with office suite applications.

Option C is incorrect because GitHub Desktop is available on both Windows and macOS.

Option E is incorrect because GitHub Desktop is not a self-hosted version of GitHub; it is a client application for accessing GitHub repositories.

Cloning a repository in GitHub refers to creating a copy of the repository on your local machine. This allows you to work on the project offline, make changes, and later push those changes back to the remote repository. It does not involve creating a copy on GitHub.com (which would be forking), retrieving updates (which would be pulling), or importing source code into a new repository (which is done differently).

=================

Saved replies in GitHub are a feature that allows users to create and save templates of commonly used responses for issues and pull requests. This feature can significantly enhance productivity and ensure consistent communication.

Saved Replies Are Tied to a User ' s Personal Account:

Option A is correct because saved replies are specific to a user ' s GitHub account, meaning they are accessible to the user across all repositories they have access to.

Saved Replies Allow Reusable Responses:

Option C is correct because the primary purpose of saved replies is to allow users to create reusable responses for issues and pull requests, saving time and ensuring consistency.

Incorrect Options:

Option B is incorrect because saved replies are not allocated at the enterprise level; they are specific to individual user accounts.

Option D is incorrect because saved replies do not send auto notifications; they are manually inserted by the user when responding to issues or pull requests.

Organization owners on GitHub have control over how GitHub Actions can be used within their organization. They can enforce restrictions to ensure security and compliance with organizational policies.

Allow Actions That Use Self-Hosted Runners:

Option A is correct because organization owners can configure the usage of self-hosted runners, allowing greater control over the environment where actions are run.

Allow Specified Actions:

Option C is correct because organization owners can allow only specific actions to run, adding a layer of security by limiting actions to those that have been vetted.

Allow Actions by Marketplace Verified Creators:

Option D is correct because organization owners can choose to allow actions created by GitHub Marketplace verified creators, ensuring that only trusted actions are used.

Incorrect Options:

Option B is incorrect because GitHub Actions are not designed to be run directly from a Codespace; Codespaces are for development environments.

Option E is a valid choice, but since the prompt asks for only three answers, it is not included in this response.

When creating custom issue forms on GitHub, the definition files are stored in the .github/ISSUE_TEMPLATE folder. This directory is used to define issue templates and forms that help standardize the information collected when users open new issues in the repository. The .github folder is a special directory used for various repository configurations and workflows.

=================

In GitHub, issues and pull requests (PRs) are essential tools for managing work and collaboration in a project. Assigning individuals to these issues or PRs is a way to indicate responsibility for addressing the issue or completing the PR.

Anyone with write permissions to the repository:

Users who have write permissions to a repository can be assigned to issues and pull requests. Write permissions allow users to push changes to the repository, create branches, and modify issues and pull requests. Assigning them to an issue or PR ensures they are recognized as responsible for the task.

Anyone who has commented on the Issue or pull request:

GitHub allows you to assign issues or pull requests to users who have already engaged with the discussion by commenting on it. This feature is particularly useful for quickly assigning tasks to those who are already involved in the conversation.

Incorrect Options:

Option A is incorrect because having an enterprise GitHub account alone does not necessarily grant the ability to be assigned to issues or PRs. Permission to assign is based on repository-specific roles and permissions.

Option C is incorrect because not all personal GitHub accounts can be assigned to issues or PRs. The user needs either write permissions to the repository or must have commented on the issue or PR.

For private repositories on GitHub, the Wiki is accessible to anyone who has Read access to the repository. This means that if you can view the code and files in the repository, you can also view its Wiki. This makes Wikis a useful tool for documenting projects in a way that is available to all collaborators without requiring special permissions beyond those needed to access the repository itself.

=================

Creating a repository template in GitHub requires specific steps and permissions:

Creating a Repository Template:

Option A is correct because a user with Admin permissions can navigate to the repository ' s settings and enable the " Template Repository " option. This allows other users to generate new repositories from this template, which includes all branches, tags, and file history.

Other Options:

Option B is incorrect because " Maintain " permissions do not allow the creation of repository templates, and the option is not found in Organization settings but in the repository settings.

Option C is incorrect because the " Template Repository " option is in the repository settings, not in Organization settings.

Option D is incorrect because " Maintain " permissions do not grant the ability to create a repository template.

To contribute to a GitHub repository, a user typically needs to be able to create branches, push changes, and open pull requests. These actions require Write access, which is the minimum level of access needed to contribute code directly to a repository.

Write Access:

Option D is correct because " Write " access allows users to contribute to the repository by pushing changes, creating branches, and opening pull requests. This is the minimum required access level for contributing code.

Incorrect Options:

Option A (Read) is incorrect because " Read " access only allows viewing the repository, not making changes.

Option B (Triage) is incorrect because while Triage access allows managing issues and pull requests, it does not allow pushing code.

Option C (Maintain) is incorrect because " Maintain " access includes additional permissions beyond those needed for basic contributions, such as managing repository settings.

Linking an issue to a pull request connects planned or reported work with the code change intended to resolve it. In GitHub workflows, this relationship helps maintainers track which pull request addresses a specific issue. When a pull request is linked in a way that closes the issue, such as through supported closing keywords or the development relationship, GitHub can automatically close the issue after the pull request is merged. This improves traceability and reduces manual cleanup after work is completed. Linking does not approve the pull request, because approval depends on review permissions and branch protection settings. It also does not lock the issue or automatically add the pull request to a project board. The main benefit is connecting work items to code changes.

As mentioned in the answer to Question no. 66, GitHub Actions workflows can reference actions from a variety of sources:

Any Public Repository:

Option A is correct. Actions can be sourced from any public GitHub repository.

The Same Repository as Your Workflow File:

Option B is correct. Actions within the same repository as the workflow file can be referenced directly.

A Published Docker Container Image on Docker Hub:

Option E is correct. Workflows can also use actions provided as Docker container images from Docker Hub.

Incorrect Options:

Option C and D are not relevant for directly referencing actions in workflows.