Microsoft GH-100 Practice Exam Questions & Answers

7 Free Questions Last reviewed October 23, 2026 Prepared & Reviewed by the ValidExamDumps Editorial Team

65 Practice Questions (Our Bank)
100 minutes Exam Duration
700 out of 1000 Passing Score
USD 165 Official Exam Fee (United States)
Exam Facts

Microsoft GH-100 Exam Details

Key details for this exam, checked against the published exam outline

Exam Code
GH-100
Full Name
GitHub Administration
Issuing Body
Microsoft
Question Format (Our Bank)
Multiple Choice
Delivery
Online proctored exam or at a testing center through Pearson VUE
Eligibility
No prerequisites required
Full Question Set
65 questions Get All Questions
Practice Questions

Free GH-100 Practice Questions

Each question shows the correct answer and an explanation of why it is right

VA
ValidExamDumps Editorial Team Every question and its answer is checked by our GH-100 exam preparation team, who also write the explanation shown with each one. How we research and review these pages

Question 1 Domain 3 Implement secure software development and compliance

Why is a GitHub App preferred over a PAT for machine authentication?

Correct Answer B
Explanation

GitHub Apps issue short-lived installation tokens that you scope to only the permissions and repositories your automation needs, reducing blast radius and automatically rotating credentials.

Question 2 Domain 3 Implement secure software development and compliance

Your organization wants to reduce costs. Which of the following actions should you take?

Correct Answer C
Explanation

Regularly auditing for inactive (dormant) users lets you suspend or remove accounts that aren't consuming seats - freeing up licenses and directly lowering your per-user subscription costs.

Question 3 Domain 1 Manage GitHub identities and access

Which of the following is the responsibility of a Team Maintainer in a GitHub organization? (Choose two.)

Correct Answer B, C
Explanation

Team maintainers can manage nested sub-teams - requesting to add or change parent/child teams within the organization's hierarchy.

Team maintainers have permission to add and remove members from their team, controlling day-to-day team membership.

Get the complete GH-100 question set $20$40

Get Full Access

Question 4 Domain 2 Administer GitHub Enterprise environment

Which of the following correctly describes the difference between controlling actions at the enterprise level versus the organization level in GitHub?

Correct Answer B
Explanation

Enterprise policies let you define and enforce mandatory settings across all member organizations - organization-level policies then operate within the options that the enterprise policy exposes.

Question 5 Domain 4 Manage GitHub Actions

What do you need to successfully generate a support bundle on a GitHub Enterprise Server?

Correct Answer C
Explanation

You must have administrator-level SSH access to the GitHub Enterprise Server appliance so you can run the ghe-support-bundle command over SSH and capture the bundle locally.

Question 6 Domain 4 Manage GitHub Actions

Which THREE of the following accurately describe how the SCIM protocol enhances user management in GitHub Enterprise Cloud? (Choose three.)

Correct Answer A, B
Explanation

SCIM automatically updates a user's account on GitHub whenever their profile attributes change in the identity provider.

When a user is removed or deactivated in the IdP, SCIM deactivates (soft-deprovisions) their GitHub account and disables access.

SCIM provisions new GitHub Enterprise Cloud accounts automatically when users are added in the identity provider.

Question 7 Domain 1 Manage GitHub identities and access

What is a key characteristic of GitHub Enterprise Server (GHES) compared to GitHub Enterprise Cloud (GHEC)?

Correct Answer C
Explanation

GitHub Enterprise Server is a self-hosted product you install and manage on your own infrastructure - giving you full control over data storage, network security policies, and the underlying environment.

Study Guide

What the Microsoft GH-100 Exam Covers

Exam domains verified against the Official Microsoft GH-100 exam guide, last checked October 2026.

Domain 1 Manage GitHub identities and access

15% - 20%

This domain covers user identity management, authentication methods, and access control configuration. You need to work with managed users, personal accounts, SAML SSO, 2FA, SCIM synchronization, and identity provider selection to secure your GitHub environment.

Sample questions from this domain above Q3Q7

Domain 2 Administer GitHub Enterprise environment

10% - 15%

This domain focuses on supporting enterprise users, managing deployment scenarios, and licensing. You should understand different GitHub Enterprise configurations, be able to generate support bundles, and recommend development process standards for your organization.

Sample question from this domain above Q4

Domain 3 Implement secure software development and compliance

25% - 30%

This is the heaviest weighted domain, covering security policies, repository features, and API access. You must configure vulnerability management, secret scanning, CodeQL, and audit logging while managing integrations and personal access tokens.

Sample questions from this domain above Q1Q2

Domain 4 Manage GitHub Actions

20% - 25%

This domain addresses workflow configuration, runner management, and secrets. You need to manage both GitHub-hosted and self-hosted runners, apply organizational policies, configure IP allow lists, and handle encrypted secrets at different scope levels.

Sample questions from this domain above Q5Q6

Domain 5 Monitor and optimize GitHub usage

10% - 15%

This domain involves analyzing enterprise activity and optimizing costs. You should be comfortable interpreting audit logs, distinguishing between admin and support responsibilities, evaluating usage patterns, and recommending optimization strategies.

FAQ

GH-100 Exam FAQ

Common questions about the exam itself

Is GH-100 suitable for someone new to GitHub administration or do I need hands-on experience first?
GH-100 targets professionals with intermediate experience managing GitHub environments, typically 6 to 12 months hands-on at the organization or enterprise level. This is not an entry-level exam. New administrators should first gain practical experience with repositories, access control, and organizational configuration before attempting it.
What is the biggest challenge area in GH-100 and how should I prepare for it?
The secure software development and compliance domain makes up 25 to 30 percent of the exam, making it the heaviest weighted section. This covers vulnerability management, secret scanning, CodeQL, audit logging, and API access. Dedicate extra study time to hands-on practice with these security features in your GitHub Enterprise environment.
How long should I spend preparing for GH-100?
With intermediate GitHub administration experience already in place, most candidates need 4 to 8 weeks of focused study. The exam tests practical skills, so labs and real-world scenarios matter more than memorizing facts. Budget time for hands-on configuration of security policies, Actions workflows, and identity management.
What happens on exam day when I take GH-100?
The exam is 100 minutes long and delivered online with proctoring. You will answer multiple choice and multiple select questions covering all five domains. You need a quiet private space, a stable internet connection, and a valid ID to proceed.
Can I retake GH-100 if I fail it?
Yes, you can retake the exam, but there is typically a waiting period between attempts. Check Microsoft's retake policy on the certification page when you register. Each attempt requires a new exam fee.
How long does the GitHub Administration certification stay valid?
Microsoft typically certifications remain valid for three years from the date you pass the exam. Check the official certification page for specific renewal requirements after that period ends.
What job roles should take GH-100?
This exam suits GitHub administrators, DevOps engineers managing GitHub infrastructure, security engineers implementing GitHub Advanced Security, and IT professionals migrating organizations to GitHub Enterprise. It validates your ability to configure and secure GitHub at enterprise scale.
Is GH-100 a prerequisite for other GitHub certifications?
GH-100 is the foundational GitHub Administration exam. Other GitHub certifications may build on this knowledge, but there are no formal prerequisites. It stands alone as a certification.
How does GH-100 differ from general GitHub knowledge or developer certifications?
GH-100 focuses entirely on administration, governance, security policies, and enterprise management rather than development or using GitHub features as a developer. It tests your ability to configure organization roles, manage permissions, audit activity, and enforce compliance across teams.
What are the key differences between managing GHEC, GHES, and personal accounts in the context of GH-100?
The exam expects you to understand deployment scenarios including GitHub Enterprise Cloud with Enterprise Managed Users, GHES (Server), and configurations with or without data residency. Each model has different identity management, licensing, and administrative capabilities that affect how you configure policies and access controls.

Other Microsoft Exams

Free practice questions for more Microsoft certification exams

GH-200 Practice Questions GitHub Actions Exam GH-300 Practice Questions GitHub Copilot Exam GH-500 Practice Questions GitHub Advanced Security Exam GH-900 Practice Questions GitHub Foundations AB-100 Practice Questions Agentic AI Business Solutions Architect AB-210 Practice Questions Accelerating Sales Pipelines with AI in Dynamics 365 AB-250 Practice Questions Transforming Contact Center Experiences with AI in Dynamics 365 AB-410 Practice Questions Building Intelligent Applications

All Microsoft exams