Distribute and Govern Actions and Workflows GH-200 Practice Questions (Page 1)

Questions 1–5

1. 1application · easy

   An organization has set its 'Allowed actions' policy to 'Allow select actions'. A developer wants to use a popular third-party action from the GitHub Marketplace in their workflow. The action is not yet in the allowed list. What must the developer do to use this action?

   • AThe developer can use the action directly in their workflow, and the organization will be prompted to approve it on the first run.
   • BThe developer must fork the action repository and use the fork in their workflow.
   • CThe developer must create a GitHub App to proxy the action and add the app to the allowed list.
   • DThe developer must contact an organization owner to add the action to the allowed list before using it.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of a composite action in GitHub Actions?

   • ATo create a reusable workflow that can be called from other workflows
   • BTo store environment variables that are shared across all repositories in an organization
   • CTo combine multiple workflow steps into a single reusable action that can be called from a job
   • DTo define a workflow that can be triggered by multiple events
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company wants to create a reusable workflow that can be used by multiple teams to build and test their applications. The workflow should accept inputs for the build command and the test command. What is the correct way to define these inputs in the reusable workflow?

   • AUse the `env` keyword in the `workflow_call` trigger to define the inputs, and reference them using `${{ env.build-command }}`.
   • BUse the `inputs` keyword in the `workflow_call` trigger to define the inputs, and reference them using `${{ inputs.build-command }}`.
   • CUse the `with` keyword in the `workflow_call` trigger to define the inputs, and reference them using `${{ with.build-command }}`.
   • DUse the `secrets` keyword in the `workflow_call` trigger to define the inputs, and reference them using `${{ secrets.build-command }}`.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which organizational policy controls whether workflows triggered by pull requests from forks can access secrets?

   • AAllowed actions policy
   • BEnvironment protection rules
   • CFork pull request workflow settings
   • DWorkflow permissions setting
   Reveal Solution Discussion Select an answer first
6. 5application · easy

   An organization has set its 'Allowed actions' policy to 'Allow select actions'. A developer wants to use an action from a private repository within the same organization. What must be done to allow this action?

   • AThe developer must create a PAT and store it as a secret in their repository.
   • BThe action must be made public.
   • CThe action must be published to the GitHub Marketplace.
   • DThe action repository must be added to the allowed list in the 'Allowed actions' policy.
   Reveal Solution Discussion Select an answer first