What is a key characteristic of environment-level secrets?

They are available to all workflows in the repository.

They are automatically shared across all environments.

They are only available to workflows that reference the environment.

They can only be used in production environments.

A workflow needs to use a configuration value that is not sensitive and should be visible to all users with read access to the repository. What should be used?

A hardcoded value in the workflow

A team wants to require manual approval before a deployment job runs, and they need to pass a database password only to that job. What should they configure?

Create an environment with a required reviewer and store the password as an environment secret.

Create a repository secret and add a manual approval step in the workflow.

Use a workflow_dispatch input to require approval.

Create an organization secret and use an environment variable for the password.

An organization has a variable named BUILD_CONFIG at the organization level set to 'org-value'. A repository has a variable with the same name set to 'repo-value'. A workflow in that repository uses an environment named 'prod' that has no BUILD_CONFIG variable. What value will the workflow see?

An error because of the conflict

GitHubActions Certification

Domain 4Objective 3

Manage Encrypted Secrets and Variables GH-200 Practice Questions (Page 5)

Part of the Manage GitHub Actions for the enterprise domain, which accounts for 20-25% of the GH-200 exam.

30questions here

6free pages

9concepts

20-25%of the exam

Questions 21–25

21foundation · easy
What is a key characteristic of environment-level secrets?
Select an answer first
22application · easy
A workflow needs to use a configuration value that is not sensitive and should be visible to all users with read access to the repository. What should be used?
Select an answer first
23application · medium
A team wants to require manual approval before a deployment job runs, and they need to pass a database password only to that job. What should they configure?
Select an answer first
24expert · medium
An organization has a variable named BUILD_CONFIG at the organization level set to 'org-value'. A repository has a variable with the same name set to 'repo-value'. A workflow in that repository uses an environment named 'prod' that has no BUILD_CONFIG variable. What value will the workflow see?
Select an answer first
25foundation · easy
A developer needs to store a database connection string that should not appear in plaintext in workflow logs. Which GitHub Actions feature should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-200

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-200” is a trademark of its owner, used for identification only.