Free Practice Questions for Microsoft GH-100 Exam

GitHub Apps authenticate as themselves with fine‑grained, installation‑scoped permissions and short‑lived tokens - rather than inheriting a user’s broad OAuth scopes - minimizing blast radius and aligning with least‑privilege principles.

When secret scanning detects a supported credential in a public repository, GitHub notifies the issuing service provider so they can revoke or rotate the exposed secret.

Enterprise policies let you define and enforce mandatory settings across all member organizations - organization‑level policies then operate within the options that the enterprise policy exposes.

You can configure the enterprise policy to allow organization owners to administer the forking setting at the organization level, giving them control over how repos fork within their orgs.

You can choose to allow any user who already has access to a private or internal repo to fork it.

You can also set the policy to never allow forking of private or internal repositories across all organizations.

The Dependency Graph continuously analyzes your repository’s manifest and lock files to build an inventory of direct and transitive dependencies and flags any that match entries in the GitHub Advisory Database, surfacing known vulnerabilities.

Users granted Write permission can push commits to non‑protected branches, allowing them to update code without needing administrative rights.

By using enterprise‑level teams with inherited enterprise policies, you can group members across all your organizations and enforce the same security settings globally - ensuring every team abides by the enterprise’s mandatory policies.

In the organization’s runner group settings, switch the access from “All repositories” to “Selected repositories” and then explicitly choose which repos may use those runners.

The GraphQL Audit Log API surfaces entries whenever repository or organization permissions are changed (“Changes permissions”).

It records when users are elevated to administrative roles (“Promotes users to admin”).

It logs alterations to a GitHub App’s granted permissions (“Changes permissions of a GitHub App”).