Which statement correctly describes the difference between encrypted secrets and plaintext variables in GitHub Actions?

Secrets are limited to 64 KB; variables have no size limit.

Secrets are available to all workflows; variables must be explicitly referenced in each job.

Secrets are encrypted and masked in logs; variables are stored in plaintext and visible in logs.

Secrets can only be used in private repositories; variables can be used in all repositories.

A team wants to use the same secret name for different values in production and staging environments. They also want to require approval for production deployments. What is the best way to achieve this?

Create organization secrets with different names for each environment.

Create one environment secret and change its value before each deployment.

Create two environments, each with its own secret value, and add a required reviewer to the production environment.

Create two repository secrets with different names and use conditional logic in the workflow.

Where in the GitHub web interface would a user navigate to create a repository-level secret?

Repository Settings → Actions → General

Organization Settings → Secrets → Repository

Repository Settings → Secrets and variables → Actions

Repository Settings → Security → Secrets

A script is failing to create a secret via the API with a 422 error. The script retrieves the public key, encrypts the value, and sends the request. What is the most likely cause?

The token lacks the 'repo' scope.

The secret name contains uppercase letters.

The encrypted value was not encrypted with the correct public key.

GitHubActions Certification

Domain 4Objective 3

Manage Encrypted Secrets and Variables GH-200 Practice Questions (Page 1)

Part of the Manage GitHub Actions for the enterprise domain, which accounts for 20-25% of the GH-200 exam.

30questions here

6free pages

9concepts

20-25%of the exam

Questions 1–5

1application · medium
A script uses the GitHub API to update a secret. It retrieves the public key and encrypts the value with libsodium. Which field must be included in the API request body?
Select an answer first
2foundation · easy
Which statement correctly describes the difference between encrypted secrets and plaintext variables in GitHub Actions?
Select an answer first
3expert · hard
A team wants to use the same secret name for different values in production and staging environments. They also want to require approval for production deployments. What is the best way to achieve this?
Select an answer first
4foundation · easy
Where in the GitHub web interface would a user navigate to create a repository-level secret?
Select an answer first
5expert · hard
A script is failing to create a secret via the API with a 422 error. The script retrieves the public key, encrypts the value, and sends the request. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-200

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-200” is a trademark of its owner, used for identification only.