What is the effect of enforcing a policy that restricts GitHub Actions to only those created by the enterprise?
Correct Answer:C
When you enforce the "Allow enterprise actions and reusable workflows" policy, GitHub will block all workflows from using actions or reusable workflows that aren't defined in a repository within your enterprise - so only actions created inside your enterprise are allowed.
An organization wants to share a single API key required for their Actions workflows. They need to restrict its use to only a subset of repositories. Where should they configure the secrets to minimize maintenance?
Correct Answer:C
By defining the API key as an organization secret, you centralize management and can grant access only to the subset of repositories you choose - eliminating per‑repo duplication while enforcing the desired scope.
What is the first step when sensitive data is accidentally pushed to a public GitHub repository?
Correct Answer:A
Revoke and/or rotate the exposed credentials immediately so they can no longer be used - this is the critical first step before you undertake any history‑rewriting or cleanup.
What is a key characteristic of GitHub Enterprise Server (GHES) compared to GitHub Enterprise Cloud (GHEC)?
Correct Answer:C
GitHub Enterprise Server is a self‑hosted product you install and manage on your own infrastructure - giving you full control over data storage, network security policies, and the underlying environment.
Which factor affects GitHub Actions pricing for GitHub-hosted runners on GitHub Enterprise Cloud?
Correct Answer:D
GitHub Actions billing for GitHub‑hosted runners is based on the number of minutes consumed and the operating system of the runner - Linux, Windows, and macOS each have different per‑minute rates.