Microsoft GH-200 Practice Exam Questions & Answers
5 Free Questions
· Last reviewed: September 5, 2026
· Prepared & Reviewed by the ValidExamDumps Editorial Team
Exam Facts
Microsoft GH-200 Exam Details
Key details for this exam, checked against the published exam outline
100
Practice Questions (Our Bank)
120 minutes
Exam Duration
- Exam Code
- GH-200
- Full Name
- GitHub Actions
- Issuing Body
- Microsoft
- Question Format (Our Bank)
- Multiple Choice
- Delivery
- Online proctored through Pearson VUE
- Eligibility
- Intermediate level experience in GitHub Actions, including workflow creation, automation, and CI/CD pipeline management. Familiarity with CI/CD, GitHub repositories, GitHub Packages, and integrating third-party services is recommended.
Practice Questions
Free GH-200 Practice Questions
Each question shows the correct answer and an explanation of why it is right
VA
ValidExamDumps Editorial Team
Every question and its answer is checked by our GH-200 exam
preparation team, who also write the explanation shown with each one.
How we research and review these pages
As a developer, how can you identify a Docker container action on GitHub?
Correct Answer:
D
Explanation
In a Docker container action, the action.yml file includes the runs.using field, which is set to docker to specify that the action runs inside a Docker container. This is the key indicator that the action is a Docker container action.
Which choices represent best practices for publishing actions so that they can be consumed reliably? (Choose two.)
Correct Answer:
B, C
Explanation
Using a tag is a best practice because tags are immutable and represent a fixed version of your action. By referencing tags, consumers of your action can be assured they are using a stable and specific version of the action, which helps in avoiding issues with breaking changes.
The commit SHA is another reliable way to specify a particular version of an action. By referencing a specific commit SHA, consumers can ensure they are using exactly the code that was written at that moment, avoiding the potential for changes in the future.
Which default environment variable specifies the branch or tag that triggered a workflow?
Correct Answer:
B
Explanation
The GITHUB_REF environment variable specifies the branch or tag that triggered the workflow. It contains the full reference to the branch or tag, such as refs/heads/main for a branch or refs/tags/v1.0 for a tag.
As a developer, which workflow steps should you perform to publish an image to the GitHub Container Registry? (Choose three.)
Correct Answer:
A, B, D
Explanation
Publishing an image to GitHub Container Registry requires three key steps. First, you set up Docker using the actions/setup-docker action to ensure the Docker CLI is available in your workflow. Second, you authenticate to the GitHub Container Registry, typically using a personal access token or the built-in GITHUB_TOKEN. Third, you push the image to the registry using docker push with the appropriate Container Registry URL. Option C about writing a Dockerfile is not necessary because you would already have created and built that image before pushing it.
You need to make a script to retrieve workflow run logs via the API. Which is the correct API to download a workflow run log?
Correct Answer:
C
Explanation
The GET /repos/:owner/:repo/actions/runs/:run_id/logs API endpoint is used to retrieve the logs of a specific workflow run identified by run_id. This is the correct method for downloading logs from a workflow run.
Domain 1: Author and manage workflows
20% - 25%
Configure workflow triggers for scheduled, manual, webhook, and repository events. Use jobs, steps, conditional logic, and strategy/matrix to generate job variations across OS and runtime versions. Implement YAML anchors and aliases to reuse mappings, and leverage predefined contexts like github, runner, env, and secrets to access workflow metadata and prevent secret leakage in logs.
Sample question from this domain above:
Q3
Domain 2: Consume and troubleshoot workflows
15% - 20%
Identify workflow triggers and diagnose failed runs using logs and run history. Expand YAML anchors and interpret matrix expansions to correlate job names to matrix axes. Locate workflows, artifacts, and logs in the UI and via API, then download and manage artifacts as needed.
Sample question from this domain above:
Q5
Domain 3: Author and maintain actions
15% - 20%
Identify and implement action types: JavaScript, Docker, and composite. Specify required files, directory structure, and metadata, then implement workflow commands within actions. Select distribution models (public, private, or marketplace) and apply versioning and release strategies.
Sample questions from this domain above:
Q1Q2Q4
Domain 4: Manage GitHub Actions for the enterprise
20% - 25%
Define and manage reusable components and templates. Configure and monitor GitHub-hosted and self-hosted runners, apply IP allow lists, manage runner groups, and identify preinstalled software versions. Define and scope encrypted secrets and variables at organization, repository, and environment levels, then access and manage them programmatically via REST APIs.
Domain 5: Secure and optimize automation
10% - 15%
Use environment protections and approval gates. Identify trustworthy actions from the Marketplace and mitigate script injection through input sanitization and least-privilege permissions. Pin third-party actions to full commit SHAs, configure granular GITHUB_TOKEN permissions, and use OIDC tokens for cloud provider federation to eliminate long-lived secrets. Generate and verify artifact attestations for deployment verification.
FAQ
GH-200 Exam FAQ
Common questions about the exam itself
What background do I need before taking GH-200?
You need intermediate experience building and managing GitHub Actions workflows, CI/CD pipelines, and automation. Familiarity with GitHub repositories, GitHub Packages, and integrating third-party services helps. This is not an entry-level exam, so hands-on workflow creation experience matters more than theory alone.
How much time do I have to answer the questions on GH-200?
You get 100 minutes to complete the exam. That is testing time only, not the full appointment length. The exam is proctored, so you need a quiet space and a camera.
Is GH-200 harder than GH-900 (GitHub Foundations)?
Yes. GH-900 covers foundational GitHub concepts across the platform. GH-200 is intermediate level and focuses specifically on GitHub Actions, requiring hands-on knowledge of workflow syntax, runners, security, and enterprise-scale management. GH-900 is recommended first if you are new to GitHub.
Which domain in GH-200 gives candidates the most trouble?
Enterprise management and security topics often trip people up because they involve configuring runners at scale, managing secrets programmatically via REST APIs, using OIDC for cloud federation, and enforcing organization-level policies. Real-world lab experience with these features helps more than memorizing alone.
How long should I study for GH-200?
Most candidates need 4 to 6 weeks of focused study if they already write GitHub Actions workflows regularly. If you are new to GitHub Actions, plan for 8 to 12 weeks. The Microsoft Learn study guide is the authoritative source, but hands-on practice building and troubleshooting real workflows is more valuable than reading alone.
How do I take GH-200 and what is exam day like?
You schedule through Pearson VUE for an online proctored exam. You need a quiet, private space, a functioning webcam, and a stable internet connection. The proctor will verify your identity and monitor the session. You cannot reference external materials during the exam.
What happens if I fail GH-200, and can I retake it?
If you fail, you can retake the exam after a waiting period (standard Microsoft policy is 24 hours between attempts). You can schedule a new exam through Pearson VUE. There is no published limit on total attempts, but each exam attempt requires a new seat fee.
How long does the GH-200 certification stay valid?
Microsoft has not published an expiration date for the GitHub Actions certification. Check the official Microsoft Learn certification page for current validity rules, as GitHub certification policies may change.
Which job role is GH-200 best for?
GH-200 is designed for DevOps engineers, software developers, and IT professionals who build and maintain CI/CD pipelines with GitHub Actions. It is especially relevant for teams adopting GitHub Actions at scale or moving to enterprise GitHub deployments.
How does GH-200 fit into the broader GitHub certification track?
GitHub offers a family of certifications: GH-900 (Foundations) is the entry point, GH-200 (Actions) focuses on automation and CI/CD, GH-100 (Enterprise Administrator) covers governance and operations, GH-500 (Advanced Security) addresses supply chain and code security, and GH-300 (Copilot) covers AI-assisted coding. Take them in order or choose based on your role.
