Question 1

Which statement is true about using default environment variables?

Accepted Answer

D

Explanation: GITHUB_WORKSPACE is a default environment variable in GitHub Actions that points to the directory on the runner where your repository is checked out. This variable allows you to access files within your repository during the workflow.

Question 2

Which default GitHub environment variable indicates the owner and repository name?

Accepted Answer

A

Explanation: The GITHUB_REPOSITORY environment variable contains the owner and repository name in the format owner/repository. It is automatically provided by GitHub Actions and can be used to reference the repository in workflows.

Question 3

Which workflow event is used to manually trigger a workflow run?

Accepted Answer

B

Explanation: The workflow_dispatch event is used to manually trigger a workflow run in GitHub Actions. You can specify this event in the workflow file to allow users to manually trigger the workflow from the GitHub UI, often with optional input parameters.

Question 4

Which default GitHub environment variable indicates the name of the person or app that initiated a workflow?

Accepted Answer

C

Explanation: The GITHUB_ACTOR environment variable indicates the name of the person or app that initiated the workflow. This variable is automatically provided by GitHub in the workflow and can be used to identify the user or application triggering the workflow.

Question 5

You are reaching your organization's storage limit for GitHub artifacts and packages. What should you do to prevent the storage limit from being reached?

Accepted Answer

B

Explanation: To prevent reaching the storage limit for GitHub artifacts and packages, you should manage and clean up artifacts and packages stored in repositories owned by your organization. This includes deleting unnecessary artifacts and managing the lifecycle of packages, as they contribute directly to your organization's storage quota.

Question 6

Which choices represent best practices for publishing actions so that they can be consumed reliably? (Choose two.)

Accepted Answer

B, C

Explanation: Using a tag is a best practice because tags are immutable and represent a fixed version of your action. By referencing tags, consumers of your action can be assured they are using a stable and specific version of the action, which helps in avoiding issues with breaking changes. The commit SHA is another reliable way to specify a particular version of an action. By referencing a specific commit SHA, consumers can ensure they are using exactly the code that was written at that moment, avoiding the potential for changes in the future.

Question 7

In which scenarios could the GITHUB_TOKEN be used? (Choose two.)

Accepted Answer

C, D

Explanation: The GITHUB_TOKEN is automatically provided by GitHub in workflows and can be used to authenticate API requests to GitHub, including publishing packages to GitHub Packages. The GITHUB_TOKEN is also used to authenticate API requests for actions like creating issues, commenting, or interacting with pull requests within the same repository.

Question 8

Where should workflow files be stored to be triggered by events in a repository?

Accepted Answer

A

Explanation: Workflow files must be stored in the .github/workflows/ directory of the repository. This is the standard location for GitHub Actions workflow files, and workflows in this directory are automatically triggered by events defined in the file, such as pushes, pull requests, or other GitHub events.

Question 9

Which of the following is the best way for an enterprise to prevent certain marketplace actions from running?

Accepted Answer

D

Explanation: The best way for an enterprise to control which GitHub Actions run is by creating a list of approved actions as an enterprise policy. This approach restricts workflows to only use the actions that are explicitly allowed, ensuring security and compliance within the organization.

Question 10

Disabling a workflow allows you to stop a workflow from being triggered without having to delete
the file from the repo. In which scenarios would temporarily disabling a workflow be most useful?
(Choose two.)

Accepted Answer

A, B

Explanation: If a workflow depends on an external service that is down, disabling the workflow temporarily will prevent it from running and sending requests to the service, thus avoiding failed requests or unnecessary retries. If a workflow is causing a negative impact on external services by generating too many requests or incorrect data due to a bug, temporarily disabling the workflow will stop this behavior while the issue is fixed.

Question 11

You are reaching your organization's storage limit for GitHub artifacts and packages. What should you do to prevent the storage limit from being reached? (Choose two.)

Accepted Answer

A, D

Explanation: Deleting artifacts from repositories manually will free up storage space. Artifacts are typically stored for a limited time by default, but manual cleanup can help manage space. Configuring the artifact and log retention period allows you to control how long artifacts and logs are retained in your repository. By shortening the retention period, you can prevent unnecessary accumulation of data and manage storage more effectively.

Question 12

Your organization is managing secrets using GitHub encrypted secrets, including a secret named
SuperSecret. As a developer, you need to create a version of that secret that contains a different
value for use in a workflow that is scoped to a specific repository named MyRepo. How should you
store the secret to access your specific version within your workflow?

Accepted Answer

B

Explanation: To scope a secret to a specific repository, you can create a new secret with a name like MyRepo_SuperSecret in the secrets section of the MyRepo repository's settings. This ensures that the secret is specific to that repository and can be used within its workflows.

Question 13

Which action type should be used to bundle a series of run steps into a reusable custom action?

Accepted Answer

A

Explanation: A composite action allows you to bundle multiple steps into a single reusable action within a workflow. It is composed of multiple run steps or other actions and can be reused across workflows, making it the perfect choice for bundling a series of steps.

Question 14

As a developer, you are optimizing a GitHub workflow that uses and produces many different files.
You need to determine when to use caching versus workflow artifacts. Which two statements are
true? (Choose two.)

Accepted Answer

A, B

Explanation: Caching is ideal for files that change rarely, such as dependencies or build outputs, as it speeds up subsequent workflow runs by reusing previously cached files instead of re-downloading or rebuilding them. Artifacts are used for persisting files produced during a job that need to be used in later jobs or after the workflow has ended, allowing them to be downloaded or referenced later.

Question 15

Without the need to use additional infrastructure, what is the simplest and most maintainable method for configuring a workflow job to provide access to an empty PostgreSQL database?

Accepted Answer

A

Explanation: GitHub Actions supports the use of service containers, which allows you to spin up a PostgreSQL database (or any other service) in a Docker container during your workflow. You can pull a PostgreSQL image from Docker Hub, and the container will automatically be available to your workflow job. This method requires no additional infrastructure and is easy to configure and maintain, as you simply define the container in the workflow file.

Free GitHub GitHub-Actions Actual Exam Questions