Microsoft GH-100 Exam (page: 2)
Microsoft GitHub Administration
Updated on: 31-Mar-2026

Viewing Page 2 of 10

When comparing Group SCIM to Team Sync for identity management in GitHub Enterprise, which statement is Correct?

  1. Group SCIM requires less initial configuration than Team Sync.
  2. Team Sync supports more identity providers than Group SCIM.
  3. Team Sync provides more automated user deprovisioning than Group SCIM.
  4. Group SCIM enables centralized user and group management through the IdP.

Answer(s): D

Explanation:

GroupSCIM lets you manage both user accounts and group memberships centrally in your identity provider - automatically provisioning, updating, and deprovisioning users and groups in GitHub - whereas TeamSync only mirrors IdP group membership into existing GitHub teams.



Why is a GitHub App preferred over a PAT for machine authentication?

  1. GitHub Apps are required to pass SAML assertions
  2. GitHub Apps have time-limited installation tokens with scoped access
  3. PATs cannot be used in GitHub Actions
  4. PATs support fewer GitHub APIs than Apps

Answer(s): B

Explanation:

GitHub Apps issue short-lived installation tokens that you scope to only the permissions and repositories your automation needs, reducing blast radius and automatically rotating credentials.



You are planning GitHub account management for a healthcare organization with strict compliance requirements.
Which THREE of the following statements accurately describe GitHub Enterprise Managed Users (EMU) accounts? (Choose three.)

  1. EMU accounts can be used for both personal and enterprise repositories.
  2. EMU accounts are managed through an identity provider such as Azure AD.
  3. EMU accounts allow users to create and manage their own credentials.
  4. EMU accounts restrict users to enterprise-related activities only
  5. EMU accounts are created and managed by individual users.
  6. EMU accounts are owned by the organization and cannot be unlinked.

Answer(s): B,D,F

Explanation:

Enterprise Managed User accounts are provisioned and authenticated exclusively through your identity provider (for example, AzureAD), so the IdP handles their creation, attribute updates, and deprovisioning.
Managed user accounts cannot create public content or interact with repositories outside your enterprise; they're confined to private and internal repos within the enterprise. EMU accounts are owned and controlled by the enterprise (via the IdP) and cannot be converted into or unlinked as personal accounts outside that enterprise.



A GitHub Enterprise administrator is planning to implement SAML SSO across their company.
Which of the following correctly distinguishes enterprise-wide SAML SSO from organization-level SAML SSO?

  1. Enterprise-wide SAML SSO requires less initial administrative overhead than organization-level implementation.
  2. Enterprise-wide SAML SSO allows different organizations to use different authentication methods.
  3. Enterprise-wide SAML SSO immediately removes users who fail to authenticate via the IdP.
  4. Enterprise-wide SAML SSO ensures users authenticate through the same IdP across all organizations.

Answer(s): D

Explanation:

Enterprise-wide SAML SSO enforces a single IdP across all member organizations--its configuration overrides any per-organization SAML settings, so everyone must authenticate through the same provider.



What distinguishes Enterprise Managed Users (EMUs) from standard GitHub accounts?

  1. EMUs are fully controlled by an IdP and cannot log in with personal credentials
  2. EMUs can only be created using email invites
  3. EMUs are managed in GitHub and use GitHub authentication
  4. EMUs are only available for GitHub Enterprise Server

Answer(s): A

Explanation:

EMU accounts are provisioned and authenticated exclusively through your identity provider - users sign in via the IdP and cannot use or manage GitHub-native credentials.



Your organization is implementing team synchronization.
Which of the following should you prioritize during the setup process?

  1. Disabling the audit log stream
  2. Setting an infrequent sync schedule to reduce performance impact
  3. Allowing manual updates to team memberships
  4. Clearly define how identity provider groups will align with GitHub teams and roles

Answer(s): D

Explanation:

Before you enable team synchronization, you should clearly define how groups in your identity provider will map to GitHub teams and roles - ensuring that when the sync runs, users land in the correct teams with the right permissions.



What makes GitHub Apps a more secure choice for automation over OAuth Apps?

  1. GitHub Apps always require two-factor authentication.
  2. GitHub Apps can only be installed by organization owners.
  3. GitHub Apps are limited to read-only access and cannot write to repositories.
  4. GitHub Apps authenticate as an app with fine-grained permissions, not as a user.

Answer(s): D

Explanation:

GitHub Apps authenticate as themselves with fine-grained, installation-scoped permissions and short-lived tokens - rather than inheriting a user's broad OAuth scopes - minimizing blast radius and aligning with least-privilege principles.



Why would a GitHub App be favored over a machine account for automation tasks?

  1. Machine accounts are required for webhook delivery.
  2. GitHub Apps provide a higher rate limit ceiling than using a personal access token on a machine account, when they use an install token and are owned by a GitHub Enterprise Cloud licensed enterprise.
  3. GitHub Apps are limited to a single repository.
  4. Machine accounts are easier to audit than GitHub Apps.

Answer(s): B

Explanation:

GitHub Apps authenticate with short-lived installation tokens scoped to fine-grained permissions and, when owned by a GitHub Enterprise Cloud organization, enjoy a higher rate limit (15,000 requests/hour) compared to a machine account's personal access token.



Viewing Page 2 of 10



Share your comments for Microsoft GH-100 exam with other users:

Jude 8/29/2023 1:56:00 PM

why is the answer to "which of the following is required by scrum?" all of the following stated below since most of them are not mandatory? sprint retrospective. members must be stand up at the daily scrum. sprint burndown chart. release planning.
UNITED STATES


Marc blue 9/15/2023 4:11:00 AM

great job. hope this helps out.
UNITED STATES


Anne 9/13/2023 2:33:00 AM

upload please. many thanks!
Anonymous


pepe el toro 9/12/2023 7:55:00 PM

this is so interesting
Anonymous


Antony 11/28/2023 12:13:00 AM

great material thanks
AUSTRALIA


Thembelani 5/30/2023 2:22:00 AM

anyone who wrote this exam recently
Anonymous


P 9/16/2023 1:27:00 AM

ok they re good
Anonymous


Jorn 7/13/2023 5:05:00 AM

relevant questions
UNITED KINGDOM


AM 6/20/2023 7:54:00 PM

please post
UNITED STATES


Nagendra Pedipina 7/13/2023 2:22:00 AM

q:42 there has to be a image in the question to choose what does it mean from the options
INDIA


BrainDumpee 11/18/2023 1:36:00 PM

looking for cphq dumps, where can i find these for free? please and thank you.
UNITED STATES


sheik 10/14/2023 11:37:00 AM

@aarun , thanks for the information. it would be great help if you share your email
Anonymous


Random user 12/11/2023 1:34:00 AM

1z0-1078-23 need this dumps
Anonymous


labuschanka 11/16/2023 6:06:00 PM

i gave the microsoft azure az-500 tests and prepared from this site as it has latest mock tests available which helped me evaluate my performance and score 919/1000
Anonymous


Marianne 10/22/2023 11:57:00 PM

i cannot see the button to go to the questions
Anonymous


sushant 6/28/2023 4:52:00 AM

good questions
EUROPEAN UNION


A\MAM 6/27/2023 5:17:00 PM

q-6 ans-b correct. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-cli-quick-start/use-the-cli/commit-configuration-changes
UNITED STATES


unanimous 12/15/2023 6:38:00 AM

very nice very nice
Anonymous


akminocha 9/28/2023 10:36:00 AM

please help us with 1z0-1107-2 dumps
INDIA


Jefi 9/4/2023 8:15:00 AM

please upload the practice questions
Anonymous


Thembelani 5/30/2023 2:45:00 AM

need this dumps
Anonymous


Abduraimov 4/19/2023 12:43:00 AM

preparing for this exam is overwhelming. you cannot pass without the help of these exam dumps.
UNITED KINGDOM


Puneeth 10/5/2023 2:06:00 AM

new to this site but i feel it is good
EUROPEAN UNION


Ashok Kumar 1/2/2024 6:53:00 AM

the correct answer to q8 is b. explanation since the mule app has a dependency, it is necessary to include project modules and dependencies to make sure the app will run successfully on the runtime on any other machine. source code of the component that the mule app is dependent of does not need to be included in the exported jar file, because the source code is not being used while executing an app. compiled code is being used instead.
Anonymous


Merry 7/30/2023 6:57:00 AM

good questions
Anonymous


VoiceofMidnight 12/17/2023 4:07:00 PM

Delayed the exam until December 29th.
UNITED STATES


Umar Ali 8/29/2023 2:59:00 PM

A and D are True
Anonymous


vel 8/28/2023 9:17:09 AM

good one with explanation
Anonymous


Gurdeep 1/18/2024 4:00:15 PM

This is one of the most useful study guides I have ever used.
CANADA