{"id":18975,"date":"2026-09-22T11:03:43","date_gmt":"2026-09-22T11:03:43","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=18975"},"modified":"2026-09-22T11:03:43","modified_gmt":"2026-09-22T11:03:43","slug":"microsoft-gh-200-practice-test-questions-and-exam-dumps-part20-q381-400","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/microsoft-gh-200-practice-test-questions-and-exam-dumps-part20-q381-400\/","title":{"rendered":"Microsoft GH-200 Practice Test Questions and Exam Dumps Part20 Q381-400"},"content":{"rendered":"<h2><b>View Full <\/b><a href=\"https:\/\/www.examlabs.com\/gh-200-exam-dumps\"><b>Microsoft GH-200 Exam Dumps<\/b><\/a><b> and Practice Test Dumps<\/b><\/h2>\n<p>&nbsp;<\/p>\n<h3><b>Question 381<\/b><\/h3>\n<p><b>Which GitHub Actions feature lets users manually provide values when starting a workflow?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Repository variables<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Workflow inputs<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Runner parameters<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Action arguments<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Workflow inputs allow a manually triggered workflow to receive values from the person starting the run. They are commonly defined with the workflow_dispatch trigger and can represent information such as deployment targets, release versions, or optional configuration choices. Inputs make manual workflows more flexible because the same workflow definition can support different execution scenarios without requiring source-code changes. Depending on the workflow configuration, inputs can use supported data types and may include descriptions or default values. This provides a structured way to collect runtime information before the workflow begins processing.<\/span><\/p>\n<h3><b>Question 382<\/b><\/h3>\n<p><b>Which GitHub Actions event is designed for manually starting a workflow from GitHub?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">workflow_dispatch<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">manual_run<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">user_trigger<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">workflow_start<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The workflow_dispatch event enables a workflow to be started manually. When configured, GitHub provides an interface for authorized users to initiate the workflow and, when defined, supply input values. Manual triggering is useful for operational tasks that should occur on demand rather than automatically after every repository event. Examples include controlled deployments, maintenance operations, or generating release-related outputs. Because the workflow is explicitly started by a user, it can combine manual inputs with existing workflow logic to provide a controlled execution process.<\/span><\/p>\n<h3><b>Question 383<\/b><\/h3>\n<p><b>Which GitHub Actions feature allows a workflow to call another workflow defined in a different file?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Workflow reference<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Reusable workflow<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Action inheritance<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Job template<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Reusable workflows allow one workflow to invoke another workflow as a callable automation component. This helps organizations centralize common processes such as testing, validation, or deployment preparation rather than duplicating the same YAML across many repositories. A reusable workflow can define supported inputs, secrets, and outputs that form an interface for callers. This approach improves consistency and makes centralized maintenance easier. It is different from calling an individual action because a reusable workflow can contain multiple jobs and coordinate a broader automation process.<\/span><\/p>\n<h3><b>Question 384<\/b><\/h3>\n<p><b>Which GitHub Actions keyword declares that a workflow can be called by another workflow?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">workflow_call<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">workflow_use<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">workflow_link<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">workflow_import<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The workflow_call event declares that a workflow is available to be invoked by another workflow. It is used in reusable workflow definitions and can be configured with inputs, secrets, and outputs. This creates a defined interface between the calling workflow and the reusable workflow. Centralizing automation in callable workflows can reduce duplication and ensure that multiple repositories follow the same process. The caller can supply the supported parameters while the called workflow performs its standardized jobs. This model is especially useful for organization-wide CI\/CD patterns.<\/span><\/p>\n<h3><b>Question 385<\/b><\/h3>\n<p><b>Which GitHub Actions construct lets one job wait for another job to finish?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">depends-on<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">after<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">needs<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">requires<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The needs keyword establishes a dependency between jobs in a GitHub Actions workflow. When one job specifies another through needs, the dependent job normally waits until the required job completes successfully before proceeding. This allows workflows to model stages such as build, test, and deployment. Job dependencies also expose upstream results through the needs context, allowing later jobs to make decisions based on previous outcomes. Proper use of dependencies helps create predictable execution order while still allowing unrelated jobs to run independently.<\/span><\/p>\n<h3><b>Question 386<\/b><\/h3>\n<p><b>Which GitHub Actions strategy creates jobs from multiple combinations of defined values?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Matrix strategy<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Parameter loop<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Combination engine<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Variant runner<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A matrix strategy allows a single job definition to execute across multiple combinations of specified values. For example, a workflow can test an application against several operating systems and runtime versions without writing a separate job definition for every combination. GitHub generates the corresponding job instances from the matrix configuration. Matrix strategies are useful for broad compatibility testing and repetitive validation. Additional controls can determine concurrency and behavior when one combination fails. This approach keeps workflow definitions concise while still providing coverage across multiple supported configurations.<\/span><\/p>\n<h3><b>Question 387<\/b><\/h3>\n<p><b>Which GitHub Actions matrix option removes selected combinations from the generated job set?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">skip<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">exclude<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">remove<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">omit<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The matrix exclude configuration removes selected combinations from the set of jobs generated by a matrix strategy. This is useful when most combinations should run but particular combinations are unsupported or unnecessary. For example, an application may support several runtime and operating-system combinations while excluding one incompatible pairing. Using exclude avoids creating separate job definitions just to handle exceptions. Matrix configuration can therefore represent both the general compatibility set and specific exceptions in a structured manner.<\/span><\/p>\n<h3><b>Question 388<\/b><\/h3>\n<p><b>Which GitHub Actions matrix option adds additional custom combinations?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">append<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">extend<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">include<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">add<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The matrix include configuration allows workflow authors to add or extend matrix combinations with additional values. It can be useful when certain generated jobs need extra variables or when a custom combination should be introduced beyond the basic Cartesian product. This provides flexibility without requiring an entirely separate job definition. Matrix configuration can use both include and exclude to shape the final set of generated jobs. Understanding the difference helps workflow authors represent complex testing or deployment combinations while keeping the workflow structure manageable.<\/span><\/p>\n<h3><b>Question 389<\/b><\/h3>\n<p><b>Which GitHub Actions property can assign a working directory specifically to a command step?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">path<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">working-directory<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">command-location<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">directory<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The working-directory property allows a run step to execute its command from a specified directory. This is useful for repositories containing multiple applications or components where commands must operate from a particular subdirectory. Instead of changing directories manually inside every command, the workflow can declare the intended working location directly. This improves readability and reduces unnecessary shell commands. The setting can be useful in monorepositories or projects containing separate frontend, backend, and infrastructure directories that each require different build or test commands.<\/span><\/p>\n<h3><b>Question 390<\/b><\/h3>\n<p><b>Which GitHub Actions property limits how long an individual job may execute?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">execution-limit<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">job-timeout<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">timeout-minutes<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">maximum-runtime<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The timeout-minutes property limits the maximum execution time of a job. If the job exceeds the configured duration, GitHub Actions terminates it rather than allowing it to run indefinitely. This can protect runner capacity from jobs that become stuck because of an unexpected command, external dependency, or test condition. Timeout configuration should reflect the expected workload so that legitimate long-running jobs are not terminated prematurely. Setting reasonable limits can also make failures easier to detect and prevent resources from being consumed indefinitely.<\/span><\/p>\n<h3><b>Question 391<\/b><\/h3>\n<p><b>Which GitHub Actions context contains information about the event payload that triggered the run?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.event<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.payload_data<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.trigger_object<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.event_data<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The github.event context provides the payload associated with the event that triggered the workflow. It contains event-specific information that can be used in expressions and workflow logic. For example, a pull request event can expose information about the pull request, while a push event contains details about the pushed references and commits. The exact structure depends on the triggering event. Using event payload data allows workflows to respond dynamically to repository activity rather than relying only on fixed configuration values.<\/span><\/p>\n<h3><b>Question 392<\/b><\/h3>\n<p><b>Which GitHub Actions context identifies the full Git reference associated with a workflow run?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.reference<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.ref<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.git_ref<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.full_ref<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The github.ref context provides the full Git reference associated with the workflow event. Depending on the event, it can represent a branch, tag, or another supported reference. This differs from github.ref_name, which provides a shorter reference name. The full reference is useful when scripts or conditions need to distinguish reference namespaces or construct operations that require the complete Git ref. Understanding the difference between the full reference and its short name helps prevent errors when workflows process branches and tags.<\/span><\/p>\n<h3><b>Question 393<\/b><\/h3>\n<p><b>Which GitHub Actions context identifies the unique number assigned to a workflow run?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.run_number<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.run_attempt<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.run_id<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.workflow_run<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The github.run_id context identifies a specific workflow run with a unique identifier. It is different from github.run_number, which provides a sequential number, and github.run_attempt, which identifies a particular attempt associated with a run. The unique run ID can be useful when integrating GitHub Actions with external systems that need to track or correlate individual executions. For example, monitoring or deployment systems can store the run ID as a reference to the exact workflow execution that produced an output or performed an operation.<\/span><\/p>\n<h3><b>Question 394<\/b><\/h3>\n<p><b>Which GitHub Actions context identifies the repository name without its owner?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.repository_name<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.repo<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.name<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.project_name<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The github.repository_name context provides the repository&#8217;s name without combining it with the repository owner. This is useful when a workflow needs only the project portion of the repository identifier. It differs from github.repository, which represents the owner and repository together, and from github.repository_owner, which identifies the owning account separately. Using the specific context value needed by a workflow avoids unnecessary string parsing and makes automation easier to understand. This can be useful when constructing filenames, deployment identifiers, or project-specific messages.<\/span><\/p>\n<h3><b>Question 395<\/b><\/h3>\n<p><b>Which GitHub Actions context identifies the account associated with the commit author?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.committer<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.commit_author<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Event-specific commit data<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">github.author_account<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Commit-author information is available through the event payload when the triggering event provides commit details. The exact location depends on the event structure, so workflows should reference the appropriate fields within github.event rather than assuming a universal top-level context property. This distinction matters because the person who authored a commit can differ from the account that triggered a workflow. Event payloads provide the detailed information associated with the specific event. Understanding that structure helps workflows accurately process commit metadata without confusing authorship with workflow initiation.<\/span><\/p>\n<h3><b>Question 396<\/b><\/h3>\n<p><b>Which GitHub Actions feature can show a workflow&#8217;s generated commands and diagnostic information in greater detail?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Debug logging<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Repository insights<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Action comments<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Runner labels<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">GitHub Actions supports debug logging that can provide additional diagnostic information during workflow execution. This can help troubleshoot unexpected behavior by exposing more detailed information than ordinary workflow output. Debugging options should generally be enabled when needed rather than treated as a replacement for normal logging practices. Additional diagnostic information can be particularly useful when investigating expression evaluation, action behavior, runner problems, or unexpected execution paths. Once troubleshooting is complete, teams can return to normal logging settings to avoid unnecessary verbosity.<\/span><\/p>\n<h3><b>Question 397<\/b><\/h3>\n<p><b>Which GitHub Actions mechanism lets a command safely hide a sensitive value from subsequent log output?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Secret registration<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Log masking<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Output encryption<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Console filtering<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">GitHub Actions supports log masking for sensitive values that should not appear in workflow output. A workflow can register a value for masking so that matching content is obscured when it is subsequently written to logs. This is particularly useful for dynamically generated sensitive data that is not already stored as a repository or organization secret. Masking should not be treated as a substitute for secure secret handling because the value must still be protected from unnecessary exposure. Workflows should avoid printing credentials and should use the platform&#8217;s supported secret-management mechanisms whenever possible.<\/span><\/p>\n<h3><b>Question 398<\/b><\/h3>\n<p><b>Which GitHub feature helps organizations review changes made to repository and account settings over time?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Audit log<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Repository README<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Project board<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Release history<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The GitHub audit log records supported administrative and security-related events, helping organizations investigate changes involving repositories, accounts, permissions, and other governance activities. Administrators can use audit information to understand what happened, when an event occurred, and which actor was associated with the activity, depending on the event and available data. This makes the audit log valuable for operational review and security investigations. It is different from repository history, which primarily records source-code changes. Audit records therefore provide a governance-oriented view of platform activity.<\/span><\/p>\n<h3><b>Question 399<\/b><\/h3>\n<p><b>Which GitHub security feature can block a detected secret before it is pushed to a repository?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Secret scanning push protection<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dependency review<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Code formatting<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Package validation<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Secret scanning push protection can help prevent supported secrets from being pushed to repositories. When a potential secret is detected during a push, the protection mechanism can block the operation and provide information about the detected credential pattern. This creates a preventive control rather than relying only on discovering exposed secrets after they have entered repository history. Organizations can configure security controls according to their GitHub plan and repository settings. Push protection should complement secure credential practices, including avoiding hardcoded secrets and using appropriate secret-management systems.<\/span><\/p>\n<h3><b>Question 400<\/b><\/h3>\n<p><b>Which GitHub security capability analyzes source code for known classes of vulnerabilities?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dependency graph<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Secret scanning<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Code scanning<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Repository insights<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Code scanning analyzes repository source code to identify potential security vulnerabilities and coding problems. GitHub supports CodeQL-based analysis as one approach to code scanning, allowing repositories to be examined using security-focused queries. Results can appear as alerts that developers can investigate and address. Code scanning differs from dependency analysis, which focuses on external packages, and secret scanning, which looks for exposed credentials or secret patterns. Combining these security capabilities provides coverage across different classes of software-security risks rather than relying on a single detection mechanism.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full Microsoft GH-200 Exam Dumps and Practice Test Dumps &nbsp; Question 381 Which GitHub Actions feature lets users manually provide values when starting a workflow? Repository variables Workflow inputs Runner parameters Action arguments Correct Answer: 2 Explanation: Workflow inputs allow a manually triggered workflow to receive values from the person starting the run. They [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18975"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=18975"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18975\/revisions"}],"predecessor-version":[{"id":18976,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18975\/revisions\/18976"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=18975"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=18975"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=18975"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}