A security team wants to ensure that only senior engineers can deploy to the production environment. They have configured an environment named `production` with a protection rule that requires a specific team to approve deployments. However, they notice that any user with write access to the repository can still modify the workflow file that deploys to production. What should they do to prevent unauthorized modifications to the deployment workflow?

Remove write access from all users except the senior engineering team.

Change the environment protection rule to require a manual approval from the senior engineering team for every workflow run.

Set the repository's 'Workflow permissions' to 'Read-only' for the `GITHUB_TOKEN`.

Add a branch protection rule on the default branch that requires pull request reviews from the senior engineering team before merging changes to the workflow file.

A team has a reusable workflow that deploys to a staging environment. The workflow is called from multiple repositories. They want to ensure that only the `main` branch can trigger the deployment. How should they enforce this?

Add a `branches` filter under the `push` trigger in the reusable workflow that specifies `main`.

Add a condition in the reusable workflow that checks `github.ref == 'refs/heads/main'` and fails if it is not.

Add a `paths` filter under the `workflow_call` trigger in the reusable workflow that specifies `main`.

Add a `branches` filter under the `workflow_call` trigger in the reusable workflow that specifies `main`.

GitHubActions Certification

Domain 4Objective 1

Distribute and Govern Actions and Workflows GH-200 Practice Questions (Page 3)

Part of the Manage GitHub Actions for the enterprise domain, which accounts for 20-25% of the GH-200 exam.

14questions here

3free pages

5concepts

20-25%of the exam

Questions 11–14

11application · medium
A security team wants to ensure that only senior engineers can deploy to the production environment. They have configured an environment named `production` with a protection rule that requires a specific team to approve deployments. However, they notice that any user with write access to the repository can still modify the workflow file that deploys to production. What should they do to prevent unauthorized modifications to the deployment workflow?
Select an answer first
12foundation · easy
Which setting allows an enterprise to restrict which third-party actions can be used in its workflows?
Select an answer first
13foundation · easy
Which file is required in the repository for a reusable workflow to be callable by other workflows?
Select an answer first
14expert · hard
A team has a reusable workflow that deploys to a staging environment. The workflow is called from multiple repositories. They want to ensure that only the `main` branch can trigger the deployment. How should they enforce this?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GH-200

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-200” is a trademark of its owner, used for identification only.

Distribute and Govern Actions and Workflows GH-200 Practice Questions (Page 3)

Questions 11–14

Which setting allows an enterprise to restrict which third-party actions can be used in its workflows?

Which file is required in the repository for a reusable workflow to be callable by other workflows?

A team has a reusable workflow that deploys to a staging environment. The workflow is called from multiple repositories. They want to ensure that only the `main` branch can trigger the deployment. How should they enforce this?

Keep studying — Manage GitHub Actions for the enterprise