A development team uses a GitHub repository for an open-source project. They want to run automated tests on pull requests from forks. The workflow needs to comment test results on the pull request. What is the most secure way to authenticate the GitHub Actions workflow?

Use a fine-grained PAT with pull-request write permission stored as an environment secret.

Use the built-in GITHUB_TOKEN with permissions set to 'contents: read' and 'pull-requests: write'.

Create a GitHub App with pull-request write permission and install it on the repository.

Use a personal access token (PAT) from a maintainer account stored as a repository secret.

Which built-in security group in Azure DevOps has the highest level of permissions?

Project Collection Administrators

Which Azure DevOps access level is required to create and manage build pipelines?

Project Collection Administrator

Microsoft Certified:DevOps Engineer Expert

Domain 4Objective 1

Design and Implement Authentication and Authorization Methods AZ-400 Practice Questions (Page 5)

Part of the Develop a security and compliance plan domain, which makes up ~19% of our current practice bank. Microsoft does not publish an official question count, but from its 140-minute exam (~55–95 total, ~10–18 in this domain), expect 3–6 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

10concepts

Questions 21–25

21application · medium
A development team uses a GitHub repository for an open-source project. They want to run automated tests on pull requests from forks. The workflow needs to comment test results on the pull request. What is the most secure way to authenticate the GitHub Actions workflow?
Select an answer first
22foundation · easy
A DevOps team needs to authenticate a CI/CD pipeline to a Microsoft Entra-protected API. Which Microsoft Entra object should be used to represent the pipeline's identity?
Select an answer first
23foundation · easy
In a GitHub Actions workflow, which token is automatically provided by GitHub to authenticate as the workflow run?
Select an answer first
24foundation · easy
Which built-in security group in Azure DevOps has the highest level of permissions?
Select an answer first
25foundation · easy
Which Azure DevOps access level is required to create and manage build pipelines?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-400

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-400” is a trademark of its owner, used for identification only.

Design and Implement Authentication and Authorization Methods AZ-400 Practice Questions (Page 5)

Questions 21–25

A development team uses a GitHub repository for an open-source project. They want to run automated tests on pull requests from forks. The workflow needs to comment test results on the pull request. What is the most secure way to authenticate the GitHub Actions workflow?

A DevOps team needs to authenticate a CI/CD pipeline to a Microsoft Entra-protected API. Which Microsoft Entra object should be used to represent the pipeline's identity?

In a GitHub Actions workflow, which token is automatically provided by GitHub to authenticate as the workflow run?

Which built-in security group in Azure DevOps has the highest level of permissions?

Which Azure DevOps access level is required to create and manage build pipelines?

Keep studying — Develop a security and compliance plan