GITHUB Admin Test With
Complete Solution
Choose two correct statements concerning the authentication and
authorization model that GitHub utilizes with regards to how a user logs in to
the system and how those users are granted permissions within the system. -
ANSWER Once a user has authenticated into the environment, their
designation within an organization will further define what that user will see
within GitHub.
Organizations can grant permissions to projects by placing users into teams.
Which of the following are true about the features and capabilities of GitHub
Enterprise Cloud? (Select two valid answers.) - ANSWER GHEC provides
advanced features such as SAML single sign-on, large file storage, and
auditing for compliance.
GHEC is hosted on GitHub's infrastructure, and it ensures that there is robust
security and reliability so that organizations do not have to manage their
own hardware servers.
As an administrator of GitHub Enterprise, you should determine whether
,SAML single sign-on should be enabled for a single organization in your
enterprise account, or all of the organizations. What are some of the
differences between enabling SAML SSO on an enterprise account for all
organizations versus a single organization? - ANSWER Having SSO for all of
the organizations in the enterprise makes user management easier but also
requires consistent identity policies amongst all organizations.
When it comes to aligning enterprises and organization permissions in the
shifting landscape of trust and control, what would be the best practice on
GitHub? - ANSWER Use a tiered access model that reflects the sensitivity of
the data and the trust level of the users.
What are the consequences and possible abuse vectors for allowing
self-hosted runners to be used in public repositories within GitHub Actions?
Choose two of the following options. - ANSWER The self-hosted runners
running on public repositories expose the host environment of the runner to
unauthorized access if they are not configured securely.
Self-hosted runners on a public repository increase the possibility of system
resource exhaustion through malicious pull requests.
As the GitHub administrator for "TechPioneers" organization, you have been
tasked with reviewing and enhancing the security protocols of the
organization's repositories. You must ensure that access to the extremely
, sensitive "CoreEngine" repository is audited effectively. What will be the best
way for auditing access to the "CoreEngine" repository? - ANSWER Review
and log all clone and fetch activities via the audit log.
Your company is onboarding GitHub Enterprise. You've been tasked with
recommending appropriate tooling and workflows for various teams in the
enterprise to help those teams mature in the practice of software
development. Which of the following recommendations provides the best
support for a standardized and yet flexible approach to software
development across teams within a large enterprise? ANSWER One workflow
for all teams using GitHub Actions for CI/CD, with mandated usage of GitHub
Codespaces for development environments.
Use a standard GitHub Actions to establish a CI/CD workflow process across
the teams, with a stipulation for the use of Codespaces when creating
development environments. - ANSWER Utilize GitHub Actions to create a
CI/CD pipeline that includes automated testing, code reviews, and a manual
approval process leading up to deployment into multiple environments.
When integrating Active Directory with GitHub for an enterprise, which two
of the following are ways in which synchronizing team memberships
enhances access and permission management for GitHub organizations?
Chosen answers Team sync automatically updates GitHub team memberships
based on changes in Active Directory groups.
Complete Solution
Choose two correct statements concerning the authentication and
authorization model that GitHub utilizes with regards to how a user logs in to
the system and how those users are granted permissions within the system. -
ANSWER Once a user has authenticated into the environment, their
designation within an organization will further define what that user will see
within GitHub.
Organizations can grant permissions to projects by placing users into teams.
Which of the following are true about the features and capabilities of GitHub
Enterprise Cloud? (Select two valid answers.) - ANSWER GHEC provides
advanced features such as SAML single sign-on, large file storage, and
auditing for compliance.
GHEC is hosted on GitHub's infrastructure, and it ensures that there is robust
security and reliability so that organizations do not have to manage their
own hardware servers.
As an administrator of GitHub Enterprise, you should determine whether
,SAML single sign-on should be enabled for a single organization in your
enterprise account, or all of the organizations. What are some of the
differences between enabling SAML SSO on an enterprise account for all
organizations versus a single organization? - ANSWER Having SSO for all of
the organizations in the enterprise makes user management easier but also
requires consistent identity policies amongst all organizations.
When it comes to aligning enterprises and organization permissions in the
shifting landscape of trust and control, what would be the best practice on
GitHub? - ANSWER Use a tiered access model that reflects the sensitivity of
the data and the trust level of the users.
What are the consequences and possible abuse vectors for allowing
self-hosted runners to be used in public repositories within GitHub Actions?
Choose two of the following options. - ANSWER The self-hosted runners
running on public repositories expose the host environment of the runner to
unauthorized access if they are not configured securely.
Self-hosted runners on a public repository increase the possibility of system
resource exhaustion through malicious pull requests.
As the GitHub administrator for "TechPioneers" organization, you have been
tasked with reviewing and enhancing the security protocols of the
organization's repositories. You must ensure that access to the extremely
, sensitive "CoreEngine" repository is audited effectively. What will be the best
way for auditing access to the "CoreEngine" repository? - ANSWER Review
and log all clone and fetch activities via the audit log.
Your company is onboarding GitHub Enterprise. You've been tasked with
recommending appropriate tooling and workflows for various teams in the
enterprise to help those teams mature in the practice of software
development. Which of the following recommendations provides the best
support for a standardized and yet flexible approach to software
development across teams within a large enterprise? ANSWER One workflow
for all teams using GitHub Actions for CI/CD, with mandated usage of GitHub
Codespaces for development environments.
Use a standard GitHub Actions to establish a CI/CD workflow process across
the teams, with a stipulation for the use of Codespaces when creating
development environments. - ANSWER Utilize GitHub Actions to create a
CI/CD pipeline that includes automated testing, code reviews, and a manual
approval process leading up to deployment into multiple environments.
When integrating Active Directory with GitHub for an enterprise, which two
of the following are ways in which synchronizing team memberships
enhances access and permission management for GitHub organizations?
Chosen answers Team sync automatically updates GitHub team memberships
based on changes in Active Directory groups.
