GitHub Foundations Certification (GH-900) — Questions and Answers

Question 1: How does linking a GitHub Issue to a pull request benefit the development workflow?

It prevents the issue from being assigned to other contributors
It triggers a Dependabot security scan
It provides traceability between the reported problem and the code change that resolves it, and can auto-close the issue on merge (Correct answer)
It grants the PR author write access to the issue thread

Correct answer: It provides traceability between the reported problem and the code change that resolves it, and can auto-close the issue on merge

Linking issues to pull requests creates a traceable connection between the problem and its fix, and using closing keywords will automatically close the issue when the PR is merged.

Question 2: What does GitHub Copilot use as context when generating code suggestions?

The entire open file and related open tabs in the editor (Correct answer)
Only public GitHub repositories
Only the current line of code
Only the project's README file

Correct answer: The entire open file and related open tabs in the editor

Copilot uses the content of the open file and other open editor tabs as context to generate more relevant and accurate suggestions.

Question 3: What is a remote repository?

A template for creating branches
A backup copy
A GitHub-hosted repository for collaboration (Correct answer)
A hidden folder

Correct answer: A GitHub-hosted repository for collaboration

A remote repository is a version of your project hosted on the internet or a network, typically on platforms like GitHub. It serves as a central point for multiple collaborators to push and pull changes, facilitating teamwork and providing a shared, up-to-date version of the project. This enables distributed development.

Question 4: How should you document security fundamentals configurations?

Store documentation on individual workstations
Document only when asked by management
Keep all configuration details in personal memory
Maintain up-to-date documentation in a centralized, accessible location (Correct answer)

Correct answer: Maintain up-to-date documentation in a centralized, accessible location

Centralized, accessible, and current documentation is essential for troubleshooting, disaster recovery, and knowledge sharing.

Question 5: When an issue is referenced with '#' followed by its number in a commit message, what happens on GitHub?

GitHub creates a cross-reference link between the commit and the issue (Correct answer)
The issue is automatically closed
The commit is tagged as a hotfix
The commit is blocked from merging

Correct answer: GitHub creates a cross-reference link between the commit and the issue

Mentioning an issue number with '#' in a commit message creates a cross-reference link in the issue timeline, providing traceability between code changes and the issue.

Question 6: Which virtual environments can GitHub Actions use?

GitHub-hosted only
Only macOS
Only Linux
macOS, Windows, and Ubuntu (Correct answer)

Correct answer: macOS, Windows, and Ubuntu

GitHub Actions provides a variety of virtual environments, known as runners, to execute your workflows. These include popular operating systems like Ubuntu (Linux), Windows, and macOS. This flexibility allows you to test and build your applications across different platforms, ensuring compatibility and broad coverage.

Question 7: What is the fundamental principle behind security fundamentals in the context of GitHub Professional Certificate?

Maximizing system complexity
Using the most expensive solutions available
Avoiding all system changes
Ensuring reliability, security, and optimal performance (Correct answer)

Correct answer: Ensuring reliability, security, and optimal performance

Security Fundamentals in GitHub Professional Certificate fundamentally aims to ensure system reliability, security, and optimal performance.

Question 8: Why are branches useful in Git?

They automatically deploy code
They isolate changes for safe development (Correct answer)
They help avoid pull requests
They increase merge conflicts

Correct answer: They isolate changes for safe development

Branches are invaluable in Git because they provide an isolated environment for developing new features or fixing bugs without impacting the main codebase. This isolation ensures that experimental or incomplete work doesn't break the stable version of the project. It promotes safe, organized development practices and allows for parallel workstreams.

Question 9: In which file types can GitHub Copilot provide inline code suggestions?

A wide range of programming languages including Python, JS, Ruby, and more (Correct answer)
Only JavaScript and TypeScript files
Only Python files
Only files in GitHub-hosted repositories

Correct answer: A wide range of programming languages including Python, JS, Ruby, and more

GitHub Copilot supports dozens of programming languages and works in any file type where code is written.

Question 10: What is the purpose of a `.github/copilot-instructions.md` file in a repository?

To configure Copilot's billing settings
To list approved Copilot users
To disable Copilot for specific files
To provide custom instructions that guide Copilot's suggestions for that repository (Correct answer)

Correct answer: To provide custom instructions that guide Copilot's suggestions for that repository

The `copilot-instructions.md` file allows teams to provide persistent custom instructions that shape Copilot's behavior across the repository.

Question 11: What triggers a GitHub Actions workflow?

GitHub events like push or PR (Correct answer)
Compiling code
Predefined cron jobs only
Only manual button click

Correct answer: GitHub events like push or PR

GitHub Actions workflows are triggered by specific events that occur in your repository, such as a `push` to a branch, the opening or updating of a `pull_request`, or even scheduled `cron` jobs. These event-driven triggers allow for highly flexible and automated CI/CD pipelines. This ensures workflows run exactly when needed.

Question 12: What is a GitHub Milestone used for?

Grouping related issues and pull requests to track progress toward a goal or deadline (Correct answer)
Marking a specific commit as a release candidate
Setting required status checks on branches
Flagging security vulnerabilities in dependencies

Correct answer: Grouping related issues and pull requests to track progress toward a goal or deadline

Milestones group issues and pull requests under a common goal with an optional due date so teams can track overall progress.

Question 13: What does 'assigning' a GitHub Issue to a user indicate?

The user is responsible for addressing or working on that issue (Correct answer)
The user has administrative control over the issue's lifecycle
The issue is blocked until that user approves it
The user will be billed for the issue's resolution time

Correct answer: The user is responsible for addressing or working on that issue

Assigning an issue designates a specific contributor as the person responsible for working on or resolving that issue.

Question 14: What does 'merging a pull request' mean?

Publishing changes to GitHub Pages
Copying repository to local
Running automated tests
Applying changes from one branch to another (Correct answer)

Correct answer: Applying changes from one branch to another

Merging a pull request means integrating the proposed changes from a feature branch into the base branch (e.g., `main` or `develop`). This action combines the commit history and code modifications, making the changes a permanent part of the target branch. It signifies the completion and acceptance of a feature or fix.

Question 15: How should you document network configuration configurations?

Keep all configuration details in personal memory
Document only when asked by management
Store documentation on individual workstations
Maintain up-to-date documentation in a centralized, accessible location (Correct answer)

Correct answer: Maintain up-to-date documentation in a centralized, accessible location

Centralized, accessible, and current documentation is essential for troubleshooting, disaster recovery, and knowledge sharing.

Question 16: What is the recommended way to handle a long-running GitHub Issue that spans multiple pull requests?

Use a tracking issue with a task list (checklist) that references related sub-issues or PRs (Correct answer)
Create a new issue for each pull request and close the original
Lock the issue to prevent additional comments
Convert the issue into a GitHub Discussion

Correct answer: Use a tracking issue with a task list (checklist) that references related sub-issues or PRs

A tracking issue with a task list (using `- [ ]` checkboxes linked to sub-issues or PRs) provides a high-level overview of a large feature or epic across multiple contributions.

Question 17: What is the fundamental principle behind implementation planning in the context of GitHub Professional Certificate?

Using the most expensive solutions available
Maximizing system complexity
Ensuring reliability, security, and optimal performance (Correct answer)
Avoiding all system changes

Correct answer: Ensuring reliability, security, and optimal performance

Implementation Planning in GitHub Professional Certificate fundamentally aims to ensure system reliability, security, and optimal performance.

Question 18: What is the fundamental principle behind troubleshooting methods in the context of GitHub Professional Certificate?

Using the most expensive solutions available
Ensuring reliability, security, and optimal performance (Correct answer)
Maximizing system complexity
Avoiding all system changes

Correct answer: Ensuring reliability, security, and optimal performance

Troubleshooting Methods in GitHub Professional Certificate fundamentally aims to ensure system reliability, security, and optimal performance.

Question 19: How do you switch to another branch in Git?

git update
git move
git switch
git checkout (Correct answer)

Correct answer: git checkout

The `git checkout <branch-name>` command is used to switch between different branches in your repository. When you check out a branch, your working directory is updated to reflect the files and history of that specific branch. This allows you to work on different features or versions of your project independently.

Question 20: How can you close a GitHub Issue automatically when a pull request is merged?

By adding the issue number to the branch name
By adding a 'ready to merge' label to the issue
By using closing keywords like 'Closes #123' in the pull request description (Correct answer)
By assigning the issue to the PR author

Correct answer: By using closing keywords like 'Closes #123' in the pull request description

Using closing keywords such as 'Closes', 'Fixes', or 'Resolves' followed by the issue number in a PR description automatically closes the linked issue when the PR is merged.

Question 21: How do you tag and push a Docker image to GitHub Container Registry for the user 'octocat' and image 'myapp'?

docker tag myapp ghcr.io/octocat/myapp:latest && docker push ghcr.io/octocat/myapp:latest (Correct answer)
docker upload ghcr.io/octocat/myapp:latest
docker push octocat/myapp:latest to ghcr.io
gh package push --image myapp --registry ghcr.io

Correct answer: docker tag myapp ghcr.io/octocat/myapp:latest && docker push ghcr.io/octocat/myapp:latest

You must tag the image with the full ghcr.io path including namespace before pushing with docker push.

Question 22: How should you document compliance standards configurations?

Store documentation on individual workstations
Document only when asked by management
Keep all configuration details in personal memory
Maintain up-to-date documentation in a centralized, accessible location (Correct answer)

Correct answer: Maintain up-to-date documentation in a centralized, accessible location

Centralized, accessible, and current documentation is essential for troubleshooting, disaster recovery, and knowledge sharing.

Question 23: What security consideration is most important in performance monitoring?

Security is not relevant to this area
Using a single strong password for all systems
Disabling logging to improve performance
Implementing the principle of least privilege and defense in depth (Correct answer)

Correct answer: Implementing the principle of least privilege and defense in depth

The principle of least privilege combined with defense in depth provides layered security that protects against various attack vectors.

Question 24: What is a GitHub Project's 'Iteration' field used for?

Grouping work into fixed time periods (sprints) for agile planning (Correct answer)
Tracking the version of the codebase associated with an issue
Scheduling automated reminders for issue assignees
Counting the number of times an issue has been reopened

Correct answer: Grouping work into fixed time periods (sprints) for agile planning

The Iteration field in GitHub Projects lets teams assign items to specific sprints or time-boxed cycles, enabling agile-style sprint planning and tracking.

Question 25: Which Git command is used to check the current status of your working directory and staging area?

git status (Correct answer)
git log
git commit
git check

Correct answer: git status

The `git status` command provides a summary of the current state of your working directory and staging area. It shows which files have been modified, which are staged for the next commit, and which untracked files are present. This command is essential for understanding what changes are pending and preparing for your next commit.

Question 26: Which approach is recommended for implementing performance monitoring changes?

Making all changes at once without testing
Skipping documentation to save time
Implementing changes only during peak hours
Following a structured change management process with testing (Correct answer)

Correct answer: Following a structured change management process with testing

A structured change management process with proper testing minimizes risk and ensures successful implementation.

Question 27: GitHub Copilot for Business differs from GitHub Copilot Individual primarily by offering what additional capability?

Offline mode for code suggestions
Faster suggestion speed
Organization-wide policy management and centralized billing (Correct answer)
Support for more programming languages

Correct answer: Organization-wide policy management and centralized billing

Copilot Business adds organization-wide policy controls, centralized seat management, and consolidated billing not available in the Individual tier.

Question 28: What is the base URL for authenticating with the GitHub Container Registry (GHCR)?

docker.pkg.github.com
packages.github.com
registry.github.com
ghcr.io (Correct answer)

Correct answer: ghcr.io

GitHub Container Registry uses ghcr.io as its base URL for authentication and image pulls/pushes.

Question 29: What should you do when troubleshooting a performance monitoring issue?

Follow a systematic approach: identify, research, test, implement, verify (Correct answer)
Immediately restart all systems
Make random changes until the problem goes away
Escalate everything without investigation

Correct answer: Follow a systematic approach: identify, research, test, implement, verify

A systematic troubleshooting approach ensures the root cause is identified and the fix is verified without creating new issues.

Question 30: What is the function of Labels in GitHub Issues?

To link issues to a deployment environment
To categorize and filter issues and pull requests by type, priority, or status (Correct answer)
To restrict who can comment on an issue
To assign a dollar value to each issue

Correct answer: To categorize and filter issues and pull requests by type, priority, or status

Labels are colored tags applied to issues and pull requests to categorize them (e.g., bug, enhancement, good first issue) and enable easy filtering.

Question 31: What is the primary purpose of using Git?

Writing documentation
Deploying applications
Designing user interfaces
Version control and collaboration (Correct answer)

Correct answer: Version control and collaboration

Git is a distributed version control system (DVCS) designed to track changes in source code and other files over time. Its primary purpose is to enable multiple developers to collaborate on a project efficiently, managing different versions of the codebase and preventing conflicts. This ensures a complete history of all modifications and facilitates teamwork.

Question 32: Which GitHub Copilot feature can automatically generate unit tests for a selected function?

Copilot /tests slash command in Chat (Correct answer)
Copilot Generate Tests
Copilot Fix
Copilot Tests

Correct answer: Copilot /tests slash command in Chat

The /tests slash command in Copilot Chat instructs Copilot to generate unit tests for the selected code.

Question 33: What security consideration is most important in data management?

Using a single strong password for all systems
Security is not relevant to this area
Disabling logging to improve performance
Implementing the principle of least privilege and defense in depth (Correct answer)

Correct answer: Implementing the principle of least privilege and defense in depth

The principle of least privilege combined with defense in depth provides layered security that protects against various attack vectors.

Question 34: Which metric best reflects the adoption and usefulness of GitHub Copilot within a development team?

Number of repositories where Copilot is enabled
Lines of code generated per day
Number of Copilot seats purchased
Suggestion acceptance rate (Correct answer)

Correct answer: Suggestion acceptance rate

The suggestion acceptance rate — the percentage of Copilot suggestions accepted by developers — is the most direct measure of how useful developers find its suggestions.

Question 35: What security consideration is most important in network configuration?

Disabling logging to improve performance
Implementing the principle of least privilege and defense in depth (Correct answer)
Security is not relevant to this area
Using a single strong password for all systems

Correct answer: Implementing the principle of least privilege and defense in depth

The principle of least privilege combined with defense in depth provides layered security that protects against various attack vectors.

Question 36: What is GitHub Copilot Chat primarily used for?

Scheduling CI/CD pipeline runs
Asking natural language questions about code and getting AI-generated answers (Correct answer)
Reviewing pull requests with AI summaries
Team messaging and collaboration

Correct answer: Asking natural language questions about code and getting AI-generated answers

GitHub Copilot Chat allows developers to ask questions about code in natural language and receive AI-generated explanations or suggestions.

Question 37: Which underlying AI model powers GitHub Copilot's code suggestions?

Codex (based on OpenAI models) (Correct answer)
GPT-4
BERT
LLaMA

Correct answer: Codex (based on OpenAI models)

GitHub Copilot is powered by OpenAI Codex, a model trained on publicly available code and natural language text.

Question 38: What is the main purpose of a pull request in GitHub?

To propose and review changes before merging (Correct answer)
To clone a repository
To push changes to remote
To delete outdated code

Correct answer: To propose and review changes before merging

A pull request (PR) is a mechanism in GitHub for developers to propose changes to a repository and request that maintainers review and merge them. It facilitates code review, discussion, and collaboration, ensuring code quality and preventing errors before integrating new features into the main branch. This is crucial for maintaining project integrity.

Question 39: What is GitHub Copilot Enterprise's key differentiator over Copilot Business?

Faster suggestion latency
Lower cost per seat
Support for additional IDEs
Knowledge base integration with your organization's private repositories for context-aware suggestions (Correct answer)

Correct answer: Knowledge base integration with your organization's private repositories for context-aware suggestions

Copilot Enterprise can index your organization's private repositories to provide context-aware suggestions grounded in your own internal codebase.

Question 40: What is the primary purpose of GitHub Issues?

To manage repository access permissions
To store binary release artifacts
To track bugs, feature requests, tasks, and other work items for a project (Correct answer)
To configure CI/CD pipelines

Correct answer: To track bugs, feature requests, tasks, and other work items for a project

GitHub Issues provide a built-in issue tracking system where teams can log bugs, feature requests, and tasks and discuss them collaboratively.

Question 41: Which package ecosystems does GitHub Packages natively support? (Select the most complete answer)

npm, RubyGems, Maven, Gradle, Docker, NuGet, and Swift (Correct answer)
npm, Maven, and Docker only
pip, npm, and Cargo only
npm, Docker, NuGet, and Helm only

Correct answer: npm, RubyGems, Maven, Gradle, Docker, NuGet, and Swift

GitHub Packages supports npm, RubyGems, Maven, Gradle, Docker/OCI containers, NuGet, and Swift package registries.

Question 42: Which approach is recommended for implementing compliance standards changes?

Implementing changes only during peak hours
Following a structured change management process with testing (Correct answer)
Making all changes at once without testing
Skipping documentation to save time

Correct answer: Following a structured change management process with testing

A structured change management process with proper testing minimizes risk and ensures successful implementation.

Question 43: Where should the .npmrc file be configured to redirect npm installs to GitHub Packages for a scoped package @myorg?

In the GitHub Actions runner environment
In the global npm config only
In the project root with @myorg:registry=https://npm.pkg.github.com (Correct answer)
In the repository's package.json under 'registries'

Correct answer: In the project root with @myorg:registry=https://npm.pkg.github.com

A .npmrc file in the project root with the scoped registry entry directs npm to use GitHub Packages for that organization's packages.

Question 44: What should you do when troubleshooting a implementation planning issue?

Escalate everything without investigation
Follow a systematic approach: identify, research, test, implement, verify (Correct answer)
Immediately restart all systems
Make random changes until the problem goes away

Correct answer: Follow a systematic approach: identify, research, test, implement, verify

A systematic troubleshooting approach ensures the root cause is identified and the fix is verified without creating new issues.

Question 45: What is the fundamental principle behind system architecture in the context of GitHub Professional Certificate?

Maximizing system complexity
Avoiding all system changes
Using the most expensive solutions available
Ensuring reliability, security, and optimal performance (Correct answer)

Correct answer: Ensuring reliability, security, and optimal performance

System Architecture in GitHub Professional Certificate fundamentally aims to ensure system reliability, security, and optimal performance.

Question 46: What is the fundamental principle behind performance monitoring in the context of GitHub Professional Certificate?

Avoiding all system changes
Ensuring reliability, security, and optimal performance (Correct answer)
Using the most expensive solutions available
Maximizing system complexity

Correct answer: Ensuring reliability, security, and optimal performance

Performance Monitoring in GitHub Professional Certificate fundamentally aims to ensure system reliability, security, and optimal performance.

Question 47: What is the best practice for monitoring security fundamentals systems?

Monitor only when users report problems
Implement automated monitoring with alerting thresholds (Correct answer)
Rely on vendor notifications exclusively
Check systems manually once a month

Correct answer: Implement automated monitoring with alerting thresholds

Automated monitoring with properly configured alerting thresholds enables proactive identification and resolution of issues.

Question 48: Which approach is recommended for implementing system architecture changes?

Following a structured change management process with testing (Correct answer)
Skipping documentation to save time
Making all changes at once without testing
Implementing changes only during peak hours

Correct answer: Following a structured change management process with testing

A structured change management process with proper testing minimizes risk and ensures successful implementation.

Question 49: What is the best practice for monitoring network configuration systems?

Implement automated monitoring with alerting thresholds (Correct answer)
Monitor only when users report problems
Rely on vendor notifications exclusively
Check systems manually once a month

Correct answer: Implement automated monitoring with alerting thresholds

Automated monitoring with properly configured alerting thresholds enables proactive identification and resolution of issues.

Question 50: What is the best practice for monitoring compliance standards systems?

Monitor only when users report problems
Rely on vendor notifications exclusively
Check systems manually once a month
Implement automated monitoring with alerting thresholds (Correct answer)

Correct answer: Implement automated monitoring with alerting thresholds

Automated monitoring with properly configured alerting thresholds enables proactive identification and resolution of issues.

Question 51: What security consideration is most important in compliance standards?

Disabling logging to improve performance
Using a single strong password for all systems
Security is not relevant to this area
Implementing the principle of least privilege and defense in depth (Correct answer)

Correct answer: Implementing the principle of least privilege and defense in depth

The principle of least privilege combined with defense in depth provides layered security that protects against various attack vectors.

Question 52: What is the purpose of a 'step' in a GitHub Action job?

To execute a command or action (Correct answer)
To manage permissions
To store logs
To switch branches

Correct answer: To execute a command or action

A 'step' in a GitHub Actions job represents a single task that is executed as part of the workflow. Each step can either run a shell command directly or execute a predefined 'action' (a reusable piece of code). This allows for granular control over the workflow's operations, enabling precise automation of tasks.

Question 53: By default, what visibility does a package published from a private repository inherit on GitHub Packages?

It depends on the package ecosystem
Public, regardless of repository visibility
Private, matching the repository visibility (Correct answer)
Internal, accessible only to organization members

Correct answer: Private, matching the repository visibility

Packages published from private repositories are private by default, inheriting the repository's visibility setting.

Question 54: Which approach is recommended for implementing troubleshooting methods changes?

Following a structured change management process with testing (Correct answer)
Skipping documentation to save time
Implementing changes only during peak hours
Making all changes at once without testing

Correct answer: Following a structured change management process with testing

A structured change management process with proper testing minimizes risk and ensures successful implementation.

Question 55: What should you do when troubleshooting a network configuration issue?

Follow a systematic approach: identify, research, test, implement, verify (Correct answer)
Make random changes until the problem goes away
Immediately restart all systems
Escalate everything without investigation

Correct answer: Follow a systematic approach: identify, research, test, implement, verify

A systematic troubleshooting approach ensures the root cause is identified and the fix is verified without creating new issues.

Question 56: What is the fundamental principle behind data management in the context of GitHub Professional Certificate?

Ensuring reliability, security, and optimal performance (Correct answer)
Using the most expensive solutions available
Maximizing system complexity
Avoiding all system changes

Correct answer: Ensuring reliability, security, and optimal performance

Data Management in GitHub Professional Certificate fundamentally aims to ensure system reliability, security, and optimal performance.

Question 57: Which GitHub feature allows you to automate project workflows such as automatically moving items when a pull request is opened?

GitHub Projects built-in automation (workflow automations) (Correct answer)
Repository rulesets
GitHub Actions only
Branch protection rules

Correct answer: GitHub Projects built-in automation (workflow automations)

GitHub Projects includes built-in workflow automation rules that can automatically set item status (e.g., move to 'In Progress') when issues or PRs change state.

Question 58: What does `git merge` do?

Deletes a branch
Combines changes from one branch into another (Correct answer)
Stages untracked files
Creates a new repository

Correct answer: Combines changes from one branch into another

The `git merge` command integrates changes from a specified branch into your current branch. It combines the commit histories of two branches, creating a new merge commit that incorporates all the changes from both lines of development. This is how features developed in isolation are brought back into the main project.

Question 59: What is the difference between a repository-level project and an organization-level project in GitHub?

Organization projects require a paid plan; repository projects are always free
There is no functional difference between the two
Repository projects can include issues from multiple repos; organization projects cannot
Organization projects can aggregate issues and PRs from multiple repositories; repository projects are limited to one repo (Correct answer)

Correct answer: Organization projects can aggregate issues and PRs from multiple repositories; repository projects are limited to one repo

Organization-level projects can pull in issues and pull requests from any repository within the organization, enabling cross-repo tracking.

Question 60: Which approach is recommended for implementing implementation planning changes?

Following a structured change management process with testing (Correct answer)
Implementing changes only during peak hours
Making all changes at once without testing
Skipping documentation to save time

Correct answer: Following a structured change management process with testing

A structured change management process with proper testing minimizes risk and ensures successful implementation.

Question 61: How should you document implementation planning configurations?

Document only when asked by management
Keep all configuration details in personal memory
Store documentation on individual workstations
Maintain up-to-date documentation in a centralized, accessible location (Correct answer)

Correct answer: Maintain up-to-date documentation in a centralized, accessible location

Centralized, accessible, and current documentation is essential for troubleshooting, disaster recovery, and knowledge sharing.

Question 62: Which Git command creates a new branch?

git branch (Correct answer)
git init
git create
git checkout

Correct answer: git branch

The `git branch <branch-name>` command is used to create a new branch in your local repository. This command simply creates a new pointer to the current commit, allowing you to switch to this new branch and start making isolated changes. It's the first step in creating a separate line of development.

Question 63: Who can approve a pull request in a protected branch?

Only repository administrators
Pull request author
Assigned reviewers or collaborators (Correct answer)
Any GitHub user

Correct answer: Assigned reviewers or collaborators

In a protected branch, specific rules are enforced to maintain code quality and stability. Approving a pull request typically requires designated individuals, such as assigned reviewers or collaborators with appropriate permissions, to sign off on the changes. This ensures that only vetted code is merged into critical branches, safeguarding the project's integrity.

Question 64: Which file defines a GitHub Actions workflow?

action.yaml
main.workflow
.github/workflows/*.yml (Correct answer)
workflow.json

Correct answer: .github/workflows/*.yml

GitHub Actions workflows are defined in YAML files located within the `.github/workflows/` directory in your repository. These YAML files specify the events that trigger the workflow, the jobs to be executed, and the steps within each job. This structured format clearly outlines the automated process for your project.

Question 65: How does GitHub Copilot handle content exclusions configured by an organization admin?

Copilot will not send excluded file content as context or show suggestions in excluded files (Correct answer)
Copilot ignores exclusions unless the user opts in
Exclusions are applied only to forked repositories
Exclusions only apply to Copilot Chat, not inline suggestions

Correct answer: Copilot will not send excluded file content as context or show suggestions in excluded files

Content exclusions prevent specified files or paths from being used as Copilot context and disable inline suggestions within those files.

Question 66: What is GitHub Actions primarily used for?

Encrypting repositories
Designing UI elements
Monitoring CPU usage
Automating code workflows (Correct answer)

Correct answer: Automating code workflows

GitHub Actions is primarily used for automating various code-related workflows, such as continuous integration (CI), continuous delivery (CD), and other custom tasks. It allows developers to define automated processes that run in response to GitHub events, streamlining development cycles and improving efficiency. This reduces manual effort and speeds up releases.

Question 67: What is a common best practice before creating a pull request?

Open an issue
Create a new fork
Sync with the base branch (Correct answer)
Reset branch to origin

Correct answer: Sync with the base branch

Before creating a pull request, it's a best practice to sync your feature branch with the latest changes from the base branch (e.g., `main`). This helps identify and resolve potential merge conflicts early, ensuring your proposed changes are based on the most current version of the project. This makes the review process smoother and reduces integration issues.

Question 68: What security consideration is most important in troubleshooting methods?

Using a single strong password for all systems
Disabling logging to improve performance
Implementing the principle of least privilege and defense in depth (Correct answer)
Security is not relevant to this area

Correct answer: Implementing the principle of least privilege and defense in depth

The principle of least privilege combined with defense in depth provides layered security that protects against various attack vectors.

Question 69: In GitHub Projects (Projects v2), what are 'custom fields' used for?

Adding custom webhooks to a project
Defining custom deployment environments
Creating custom branch naming rules
Extending project items with additional metadata like priority, story points, or dates (Correct answer)

Correct answer: Extending project items with additional metadata like priority, story points, or dates

Custom fields in GitHub Projects v2 let teams add metadata such as priority, effort estimates, or iteration numbers directly to project items.

Question 70: Which tool helps automate checks on pull requests?

GitHub Discussions
GitHub Actions (Correct answer)
GitHub Pages
GitHub Gists

Correct answer: GitHub Actions

GitHub Actions is a powerful CI/CD platform that allows you to automate workflows directly within your GitHub repository. It can be configured to automatically run tests, lint code, build projects, and perform other checks whenever a pull request is opened or updated. This ensures code quality and consistency throughout the development lifecycle.

Question 71: What is the best practice for monitoring implementation planning systems?

Implement automated monitoring with alerting thresholds (Correct answer)
Monitor only when users report problems
Check systems manually once a month
Rely on vendor notifications exclusively

Correct answer: Implement automated monitoring with alerting thresholds

Automated monitoring with properly configured alerting thresholds enables proactive identification and resolution of issues.

Question 72: What is the best practice for monitoring troubleshooting methods systems?

Check systems manually once a month
Rely on vendor notifications exclusively
Monitor only when users report problems
Implement automated monitoring with alerting thresholds (Correct answer)

Correct answer: Implement automated monitoring with alerting thresholds

Automated monitoring with properly configured alerting thresholds enables proactive identification and resolution of issues.

Question 73: What is GitHub Discussions primarily designed for compared to GitHub Issues?

Discussions are for tracking actionable work items; Issues are for open-ended conversations
Discussions are for open-ended conversations, Q&A, and announcements; Issues are for actionable tasks and bugs (Correct answer)
Discussions are only available to organization owners
Discussions replace Issues entirely in modern repositories

Correct answer: Discussions are for open-ended conversations, Q&A, and announcements; Issues are for actionable tasks and bugs

GitHub Discussions hosts community conversations, Q&A, and announcements that don't require a trackable work item, while Issues are reserved for actionable bugs and tasks.

Question 74: How should you document data management configurations?

Keep all configuration details in personal memory
Store documentation on individual workstations
Maintain up-to-date documentation in a centralized, accessible location (Correct answer)
Document only when asked by management

Correct answer: Maintain up-to-date documentation in a centralized, accessible location

Centralized, accessible, and current documentation is essential for troubleshooting, disaster recovery, and knowledge sharing.

Question 75: What is a repository in GitHub used for?

Encrypting user data
Storing project files and version history (Correct answer)
Hosting websites
Running CI/CD pipelines

Correct answer: Storing project files and version history

A GitHub repository serves as a central location to store all project files, including code, documentation, and assets. Crucially, it also maintains the complete version history of these files, allowing users to track changes, revert to previous states, and collaborate effectively. It's the core unit for project management on GitHub.

Question 76: Which GitHub feature allows team members to comment on code during a pull request?

GitHub Actions
Code Review (Correct answer)
Issue Tracker
GitHub Pages

Correct answer: Code Review

GitHub's Code Review feature, integral to pull requests, allows team members to examine proposed code changes, add comments, suggest improvements, and discuss modifications directly within the pull request interface. This collaborative process helps ensure code quality, catch bugs, and share knowledge among developers. It's a cornerstone of collaborative development.

Question 77: What must an organization administrator configure to enable GitHub Copilot for all members of an organization?

A repository-level secret
A branch protection rule
A GitHub Actions workflow
A Copilot Business or Enterprise subscription and seat assignment policy (Correct answer)

Correct answer: A Copilot Business or Enterprise subscription and seat assignment policy

To enable Copilot for an organization, an admin must have a Copilot Business or Enterprise license and configure seat assignment for members.

GitHub Foundations Certification (GH-900)

The GitHub Foundations certification validates foundational knowledge of GitHub including Git basics, collaboration features, modern development workflows with Actions and Copilot, project management, security administration, and open source community practices. It is delivered via Pearson VUE as a proctored assessment.

Questions

40 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

docs.github.com — Test delivery, eligibility · verified Oct 2026
learn.microsoft.com — Fees, renewal, time limit, score validity, passing score · verified Oct 2026