A composite action has a step that uses another action. The step fails with 'Unable to resolve action owner/repo@v1'. The referenced action exists and is public. What is the most likely cause?

The composite action does not have access to the network.

The referenced action's tag 'v1' has been deleted.

The composite action must use 'uses: docker://' to reference other actions.

The composite action's steps must be defined in a separate file.

Why might a maintainer choose to use a major version tag (e.g., `v1`) for their action instead of only using specific release tags?

To allow users to automatically receive non-breaking updates within the major version.

To make the action available on the GitHub Marketplace.

To ensure the action is immutable and cannot be changed.

To prevent users from using older versions of the action.

In a Docker container action, where is the `image` key typically defined to specify the Dockerfile to build?

In the `inputs` section of action.yml

In the `env` section of action.yml

In the `runs` section of action.yml

A JavaScript action fails with the error 'Input required and not supplied: token'. The action.yml defines the input with 'required: true'. The workflow that calls the action does not pass the input. What is the most likely cause?

The workflow does not include the 'with' block for the action.

The action's code uses core.getInput('token') without checking for an empty string.

The action.yml uses 'inputs' instead of 'with'.

The action is a Docker action and the input is not passed as an environment variable.

A security-conscious organization uses a third-party action in their workflows. They want to ensure the action cannot be changed by the upstream maintainer without their knowledge. Which pinning strategy should they use?

Pin to a short SHA (e.g., @abc1234).

Pin to the major version tag (e.g., @v3).

Pin to a branch name (e.g., @main).

Pin to the full commit SHA (e.g., @ ).

GitHubActions Certification

Domain 3Objective 1

Create and Troubleshoot Custom Actions GH-200 Practice Questions (Page 2)

Part of the Author and maintain actions domain, which accounts for 15-20% of the GH-200 exam.

25questions here

5free pages

7concepts

15-20%of the exam

Questions 6–10

6application · medium
A composite action has a step that uses another action. The step fails with 'Unable to resolve action owner/repo@v1'. The referenced action exists and is public. What is the most likely cause?
Select an answer first
7foundation · easy
Why might a maintainer choose to use a major version tag (e.g., `v1`) for their action instead of only using specific release tags?
Select an answer first
8foundation · easy
In a Docker container action, where is the `image` key typically defined to specify the Dockerfile to build?
Select an answer first
9application · medium
A JavaScript action fails with the error 'Input required and not supplied: token'. The action.yml defines the input with 'required: true'. The workflow that calls the action does not pass the input. What is the most likely cause?
Select an answer first
10application · medium
A security-conscious organization uses a third-party action in their workflows. They want to ensure the action cannot be changed by the upstream maintainer without their knowledge. Which pinning strategy should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-200

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-200” is a trademark of its owner, used for identification only.