GH-200 GitHub Actions Free Practice Questions and Answers

A workflow only needs to read repository contents and upload a build artifact. How should its token permissions be configured?

• A. Grant only the required read permission and the artifact-related permission needed by the job
• B. Grant every available permission to every workflow
• C. Use a personal account password as the token
• D. Disable token permission controls for the repository

A build job produces a package that a separate test job must download during the same workflow run. Which feature should connect the jobs?

• A. Upload the package as an artifact in the build job and download it in the test job
• B. Store the package in the workflow run name
• C. Add the package binary to a job output string
• D. Re-run the build independently and assume identical output

A dependency cache should be reused only when the dependency lock file has not changed. What should the cache key include?

• A. A hash of the lock file, along with relevant operating-system or runtime context
• B. The repository description only
• C. A random value generated for each run
• D. The workflow display name with no dependency information

A deployment job should run only after tests succeed and only for pushes to the protected production branch. Which design is appropriate?

• A. Set the job dependency on the test job and apply a branch condition to the deployment job
• B. Remove all job dependencies and run deployment on every event
• C. Put the branch name in a comment and rely on reviewers to notice
• D. Run deployment before tests so failures are detected sooner

A repository uses third-party actions in workflows. Which practice best reduces risk from an action changing unexpectedly?

• A. Pin actions to a reviewed full commit SHA and update pins through a controlled review process
• B. Reference every action by a mutable branch name and never review updates
• C. Copy access tokens into the action’s public input fields
• D. Allow all actions to access every secret by default