GH-200 GitHub Actions Free Practice Questions and Answers

A team wants a workflow to run when a pull request targets the main branch. Which trigger configuration best fits this requirement?

• A. Use the pull_request event with a branch filter for main
• B. Use only a weekly schedule event
• C. Use workflow_dispatch without any event filter
• D. Use release with a published-type filter

A platform team needs several repositories to call the same centrally maintained deployment workflow. What should the team create?

• A. A workflow configured with workflow_call, then reference it from caller workflows
• B. A separate manually copied workflow in every repository
• C. A composite action that starts an entire independent workflow run
• D. A repository secret containing the workflow YAML

A deployment workflow must authenticate to a cloud provider without storing a long-lived client secret in GitHub. Which approach should be preferred when supported by the provider?

• A. OpenID Connect federation using a short-lived token and a narrowly scoped cloud role
• B. Put the client secret in a workflow file
• C. Use a personal access token shared by all contributors
• D. Print a temporary credential to the workflow log

A production deployment should pause until an authorized reviewer approves it. Which GitHub Actions feature is designed for this gate?

• A. A protected environment with required reviewers
• B. A matrix strategy with additional operating systems
• C. A cache key that includes the commit SHA
• D. A concurrency group with cancellation enabled

A test job must run the same test suite on three supported runtime versions. Which strategy is the most maintainable?

• A. Define a matrix variable for the runtime versions and reference it in the job
• B. Create a separate repository for each runtime
• C. Duplicate the workflow steps in three unrelated files
• D. Test only the newest runtime