Microsoft GH-900 GitHub Foundations Exam Practice Test

Assigning collaborators to an issue or pull request helps clarify responsibility and ownership. When multiple collaborators are assigned, GitHub does not limit responsibility to only the first assignee. Instead, all assigned users are associated with the work item and can receive notifications based on their notification settings. This is useful when several people share responsibility for investigation, implementation, review, or follow-up. Assignment does not automatically lock the issue or pull request, and it does not automatically change the item’s status to “In Progress.” Status tracking is usually handled through labels, Projects fields, or workflow automation. In GitHub collaboration workflows, assignees make it clear who is expected to work on or respond to an issue or pull request.

On GitHub, you can choose to receive ongoing updates about specific activities by subscribing to notifications for all activity in a repository. This allows you to stay informed about all changes, discussions, and updates related to a particular project. Additionally, GitHub provides the ability to customize notifications to suit your preferences.

=================

GitHub Mobile is designed for reviewing, triaging, and staying connected to GitHub activity while away from a desktop environment. It supports managing notifications from GitHub.com, allowing users to triage and clear notifications directly from their mobile device. It also supports reviewing pull requests, including visual review scenarios such as comparing changed images. Another mobile feature is scheduling push notifications for custom hours, which helps users control when they receive GitHub alerts. GitHub Mobile is not intended to replace a full development workstation. Editing files in pull requests and interactively adding changes to a commit are development tasks better suited to GitHub.com, GitHub Desktop, Codespaces, or the Git command line. The mobile app focuses on lightweight collaboration and review workflows.

Creating a repository template in GitHub requires specific steps and permissions:

Creating a Repository Template:

Option A is correct because a user with Admin permissions can navigate to the repository ' s settings and enable the " Template Repository " option. This allows other users to generate new repositories from this template, which includes all branches, tags, and file history.

Other Options:

Option B is incorrect because " Maintain " permissions do not allow the creation of repository templates, and the option is not found in Organization settings but in the repository settings.

Option C is incorrect because the " Template Repository " option is in the repository settings, not in Organization settings.

Option D is incorrect because " Maintain " permissions do not grant the ability to create a repository template.

GitHub Mobile provides a streamlined experience for managing your GitHub notifications and participating in discussions, but it does not offer full functionality compared to the desktop or web interface.

Managing Notifications:

Option E is correct because GitHub Mobile allows users to manage notifications, keeping them up to date with their repositories, issues, pull requests, and other activities on GitHub.

Incorrect Options:

Option A is incorrect because GitHub Mobile cannot be used as a self-hosted runner.

Option B is incorrect because managing enterprise and organization settings is not supported in GitHub Mobile.

Option C is incorrect because GitHub Mobile does not offer a chat or voice calling feature.

Option D is incorrect because forking and cloning repositories are not actions available in GitHub Mobile.

InnerSource applies open source collaboration practices inside an organization while keeping the work internal. Its primary goal is to make company projects more visible to employees and reduce friction when teams contribute across boundaries. Instead of every team working in isolation, InnerSource encourages shared ownership, discoverable repositories, clear contribution guidelines, issues, pull requests, and code reviews. This helps employees reuse existing solutions, avoid duplicated work, and collaborate more efficiently. Unlike open source, InnerSource does not require making repositories public or accepting outside contributors. It also does not remove the need for pull requests; pull requests are often central to the contribution process. The key difference is that InnerSource focuses on internal collaboration using open source-style practices.

In GitHub, labels are used to categorize issues and pull requests, and certain default labels are provided to help manage tasks:

Help Wanted Label:

Option C is correct. The " Help wanted " label is used to indicate that the maintainer of the repository needs assistance on a particular issue or pull request. This label helps in attracting contributors who might be interested in helping with specific tasks.

Other Options:

Option A ( " Enhancement " ) is incorrect because it indicates a request for a new feature or improvement rather than a call for help.

Option B ( " Question " ) is incorrect because it is used to flag issues or pull requests that seek clarification or additional information, not necessarily requiring assistance.

Option D ( " Documentation " ) is incorrect because it labels issues or PRs related to documentation, not for seeking help.

A distributed version control system (DVCS) like Git is best described as a system that ensures each developer has their own local copy of the entire code repository, including the complete project history and metadata. This decentralized approach allows developers to work independently, with full access to the project ' s history and files, and later synchronize their changes with others. Unlike centralized systems, DVCS does not rely on a single central server, which provides greater flexibility and robustness in collaboration.

=================

GitHub flow is a lightweight workflow used to safely introduce changes into a repository. The first step is to create a branch for your changes. A branch gives you an isolated workspace where you can develop a feature, fix a bug, or test an idea without directly affecting the main branch. After creating the branch, you make commits and push those changes. Then you open a pull request so others can review and discuss the work. Once the pull request is approved, it can be merged into the main branch. Deleting the branch happens only after the work has been merged and the branch is no longer needed. Therefore, branch creation comes first.

In a Git repository, a file can be in one of the following three valid states:

Committed : The file is saved in the local repository. It is part of the permanent history of the project.

Modified : The file has been changed but not yet staged or committed. It is in the working directory.

Staged : The file has been marked to be included in the next commit. It is in the staging area, ready to be committed.

These states represent the typical lifecycle of a file as it moves through the process of being edited, reviewed, and saved in Git.

=================

Organization owners on GitHub have control over how GitHub Actions can be used within their organization. They can enforce restrictions to ensure security and compliance with organizational policies.

Allow Actions That Use Self-Hosted Runners:

Option A is correct because organization owners can configure the usage of self-hosted runners, allowing greater control over the environment where actions are run.

Allow Specified Actions:

Option C is correct because organization owners can allow only specific actions to run, adding a layer of security by limiting actions to those that have been vetted.

Allow Actions by Marketplace Verified Creators:

Option D is correct because organization owners can choose to allow actions created by GitHub Marketplace verified creators, ensuring that only trusted actions are used.

Incorrect Options:

Option B is incorrect because GitHub Actions are not designed to be run directly from a Codespace; Codespaces are for development environments.

Option E is a valid choice, but since the prompt asks for only three answers, it is not included in this response.

GitHub provides repository admins with a feature called " Insights " where they can view various pre-built visualizations and analytics related to the repository.

Insights:

Option C is correct because the " Insights " tab in a GitHub repository offers various pre-built visualizations, including contributions, traffic, code frequency, dependency graphs, and more. This helps admins and maintainers track the project ' s activity and health.

Other Options:

Option A (Settings) is incorrect because the Settings tab is where you configure repository settings, permissions, and integrations, but it does not provide visualizations of repository data.

Option B (Issues) is incorrect because the Issues tab is used for tracking bugs, enhancements, and other tasks but does not provide data visualizations.

Option D (Charts) is incorrect as there is no " Charts " tab or section in GitHub. The correct location for data visualizations is under " Insights. "

GitHub Sponsors is a program designed to provide a platform for developers and companies to financially support open-source projects and their maintainers.

Financial Support for Open Source Projects:

Option D is correct because the main purpose of GitHub Sponsors is to allow members of the developer community, including individuals and organizations, to financially support open-source projects and maintainers. This helps sustain open-source development by providing developers with the resources they need to continue their work.

Incorrect Options:

Option A is incorrect because GitHub Sponsors is not based on project popularity (e.g., stars); it is based on voluntary contributions.

Option B is incorrect because while GitHub provides the platform, the purpose of GitHub Sponsors is not for GitHub itself to fund projects, but to enable the broader community to do so.

Option C is incorrect because GitHub Sponsors is not a marketplace for purchasing software but a platform for supporting developers.

Innersource is a development practice where an organization adopts open-source development methodologies within its own internal environment. The primary goal of innersource is to break down silos and encourage collaboration across different teams within the organization.

Sharing Code Between Teams:

Option B is correct because innersource involves sharing code between teams within the organization, similar to how open-source communities share code across the public domain. This practice fosters collaboration, improves code quality, and allows for reuse of code, reducing duplication of efforts.

Incorrect Options:

Option A is incorrect because adopting open-source code into the organization is related to using open-source software, not specifically to innersource practices.

Option C is incorrect because removing open-source code from the organization is contrary to the principles of both open source and innersource.

Option D is incorrect because making all repositories publicly accessible refers to open source, not innersource. Innersource typically involves keeping code internal to the organization.

Markdown is a lightweight markup language with plain-text formatting syntax. It is designed to be easy to write and read in its raw form, and it can be converted into HTML and other formats. Markdown is commonly used for formatting readme files, writing messages in online discussion forums, and creating rich text documents.

Markup Language:

Option A is correct because Markdown is indeed a markup language. It is not a programming language, scripting language, version control system, or containerization solution.

Incorrect Options:

Option B is incorrect because Markdown is not a programming language; it does not involve control structures or variables.

Option C is incorrect because Markdown is not used for scripting or automation.

Option D is incorrect because Markdown does not manage version control.

Option E is incorrect because Markdown is not related to containerization technologies like Docker.

On GitHub, certain actions automatically subscribe you to conversations so that you receive notifications about further activity in that thread.

Opening a Pull Request or Issue:

Option C is correct because when you open a pull request or issue, you are automatically subscribed to the conversation and will receive notifications for any updates.

Commenting on a Thread:

Option D is correct because commenting on an issue or pull request automatically subscribes you to that thread, ensuring you are notified of further comments or changes.

Being Assigned to an Issue or Pull Request:

Option E is correct because when you are assigned to an issue or pull request, you are automatically subscribed to notifications related to it.

Incorrect Options:

Option A is incorrect because pushing a commit to the default branch does not automatically subscribe you to conversations.

Option B is incorrect because being added as a repo admin does not automatically subscribe you to specific conversations unless you engage with them.

To locate an existing GitHub Action provided by a GitHub-approved vendor, you can use the following methods:

Verification Badge:

Option C is correct because actions provided by GitHub-approved vendors will typically have a verification badge. This badge indicates that the action is from a trusted source, giving users confidence in its security and reliability.

Search the GitHub Marketplace:

Option F is correct because GitHub Marketplace is the official location to find and install actions, including those provided by third-party vendors. You can search for actions by the vendor ' s name to find the specific one you need.

Incorrect Options:

Option A is not necessary to locate an existing action; creating a workflow file is for implementing the action, not locating it.

Option B is incorrect because searching the vendor’s website for a github.yaml index is not a standard practice for finding actions.

Option D is incorrect because installing a GitHub App is unrelated to finding an existing action.

Option E is incorrect because adding a vendor as an allowed Actions Source is a configuration step for using the action, not for locating it.

A pull request compares changes from one branch into another branch. The compare branch contains the proposed changes, while the base branch is the branch those changes are intended to merge into. A pull request also includes a description where the author explains what changed, why the change is needed, and any related issue or testing information. Repository visibility settings are not part of an individual pull request. Visibility settings belong to the repository configuration and determine whether the repository is public, private, or internal, depending on the account type and plan. Since pull requests focus on proposing, reviewing, discussing, and merging branch changes, the compare branch, base branch, and description are pull request components, while repository visibility settings are not.

Two recommended ways to improve the discoverability of a repository on GitHub are:

B. Create a README file describing the repository: A well-written README file provides essential information about the project, such as what it does, how to use it, and how to contribute. This is often the first thing potential users or contributors will see, making it critical for discoverability.

D. Add topics to classify the repository: Adding topics to your repository helps classify it under specific categories, making it easier for others to find it through GitHub’s search and exploration features. Topics act like tags, helping to connect your project with users interested in similar subjects.

Registering a repository with GitHub search and adding labels are not applicable actions for improving discoverability in the broader sense.

=================

GitHub Enterprise Cloud with Enterprise Managed Users (EMU) integrates closely with an organization ' s identity provider (IdP), such as Azure Active Directory, to manage user accounts. The primary benefit of this setup is centralized control and streamlined management. It allows organizations to enforce policies, manage user permissions, and provision or deprovision accounts directly through their IdP, ensuring consistency and security across the organization. This approach is ideal for large enterprises that require tight control over their users and resources.

=================

The GitHub Marketplace is the place where users can discover, browse, and install various tools and integrations that extend the functionality of GitHub. These tools can include CI/CD services, security checks, and other development utilities that enhance workflow automation and project management.

=================

To highlight a post at the top of the Discussions page on GitHub, you can Pin the discussion. Pinning a discussion ensures it remains prominently visible at the top of the list, making it easier for others to find and participate in that discussion. This is particularly useful for important announcements or frequently referenced topics.

=================

GitHub is a cloud-based platform that provides hosting for software development and version control using Git. It offers tools for collaboration, project management, and security to create a safe and productive environment for developers.

GitHub Overview:

Option B is correct because GitHub is primarily known as a cloud-based hosting service for Git repositories, offering a collaborative environment where developers can work together on projects, manage version control, and implement security practices.

Incorrect Options:

Option A is incorrect because GitHub is not proprietary in the sense of being closed off from version control standards; it is widely recognized as an open platform for collaboration.

Option C is incorrect because, while GitHub is accessible to new developers, it is designed for developers of all skill levels and not specifically tailored for beginners.

Option D is incorrect because GitHub is not a centralized version control system; it supports Git, which is distributed.

GitHub Secret Scanning helps protect repositories by detecting committed credentials and other sensitive values that should not be exposed in source code. SSH private keys are sensitive because they can allow unauthorized access to servers or repositories. API keys are also critical because they can grant access to external services, cloud platforms, or applications. Database connection strings may expose usernames, passwords, hosts, or database endpoints, making them dangerous if leaked. Secret Scanning is designed to identify these kinds of credential patterns and alert repository maintainers or security teams. Hardcoded email addresses are usually not treated as secrets, and code formatting issues are handled by linters or code quality tools, not Secret Scanning.