A DevOps engineer wants to automate the creation of a repository secret using the GitHub REST API. What is the first step they must perform?

Send the secret in plaintext to the API.

Get the repository's public key for secret encryption.

Create a personal access token with repo scope.

Encrypt the secret with the organization's public key.

A custom action needs to receive an API token from the workflow. The action is written in JavaScript and expects the token as an input. How should the workflow pass the token to the action?

Use the secrets context inside the action's JavaScript code.

Set the secret as an environment variable in the action's code.

Pass the secret directly as an input using ${{ secrets.API_TOKEN }}.

Write the token to a file and have the action read it.

A platform team wants to share an API token across multiple repositories in their organization. They want to restrict which repositories can use it. What is the most appropriate way to configure this?

Create a repository-level secret in each repository.

Create an environment-level secret in each repository.

Create a variable and reference it in workflows.

Create an organization-level secret and set the repository access policy to selected repositories.

An organization has a repository-level variable named DEPLOY_ENV set to 'staging'. An environment named production also has a variable DEPLOY_ENV set to 'production'. A workflow job deploys to the production environment. What value will the job see for DEPLOY_ENV?

An error because of the conflict

GitHubActions Certification

Domain 4Objective 3

Manage Encrypted Secrets and Variables GH-200 Practice Questions (Page 3)

Part of the Manage GitHub Actions for the enterprise domain, which accounts for 20-25% of the GH-200 exam.

30questions here

6free pages

9concepts

20-25%of the exam

Questions 11–15

11foundation · easy
What is the correct syntax to reference a variable named 'BUILD_NUMBER' in a workflow?
Select an answer first
12application · medium
A DevOps engineer wants to automate the creation of a repository secret using the GitHub REST API. What is the first step they must perform?
Select an answer first
13application · medium
A custom action needs to receive an API token from the workflow. The action is written in JavaScript and expects the token as an input. How should the workflow pass the token to the action?
Select an answer first
14application · medium
A platform team wants to share an API token across multiple repositories in their organization. They want to restrict which repositories can use it. What is the most appropriate way to configure this?
Select an answer first
15application · medium
An organization has a repository-level variable named DEPLOY_ENV set to 'staging'. An environment named production also has a variable DEPLOY_ENV set to 'production'. A workflow job deploys to the production environment. What value will the job see for DEPLOY_ENV?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-200

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-200” is a trademark of its owner, used for identification only.