Microsoft GH-100 Exam (page: 2)
Microsoft GitHub Administration
Updated on: 13-Dec-2025

Viewing Page 2 of 10

When comparing Group SCIM to Team Sync for identity management in GitHub Enterprise, which statement is Correct?

  1. Group SCIM requires less initial configuration than Team Sync.
  2. Team Sync supports more identity providers than Group SCIM.
  3. Team Sync provides more automated user deprovisioning than Group SCIM.
  4. Group SCIM enables centralized user and group management through the IdP.

Answer(s): D

Explanation:

GroupSCIM lets you manage both user accounts and group memberships centrally in your identity provider - automatically provisioning, updating, and deprovisioning users and groups in GitHub - whereas TeamSync only mirrors IdP group membership into existing GitHub teams.



Why is a GitHub App preferred over a PAT for machine authentication?

  1. GitHub Apps are required to pass SAML assertions
  2. GitHub Apps have time-limited installation tokens with scoped access
  3. PATs cannot be used in GitHub Actions
  4. PATs support fewer GitHub APIs than Apps

Answer(s): B

Explanation:

GitHub Apps issue short-lived installation tokens that you scope to only the permissions and repositories your automation needs, reducing blast radius and automatically rotating credentials.



You are planning GitHub account management for a healthcare organization with strict compliance requirements.
Which THREE of the following statements accurately describe GitHub Enterprise Managed Users (EMU) accounts? (Choose three.)

  1. EMU accounts can be used for both personal and enterprise repositories.
  2. EMU accounts are managed through an identity provider such as Azure AD.
  3. EMU accounts allow users to create and manage their own credentials.
  4. EMU accounts restrict users to enterprise-related activities only
  5. EMU accounts are created and managed by individual users.
  6. EMU accounts are owned by the organization and cannot be unlinked.

Answer(s): B,D,F

Explanation:

Enterprise Managed User accounts are provisioned and authenticated exclusively through your identity provider (for example, AzureAD), so the IdP handles their creation, attribute updates, and deprovisioning.
Managed user accounts cannot create public content or interact with repositories outside your enterprise; they're confined to private and internal repos within the enterprise. EMU accounts are owned and controlled by the enterprise (via the IdP) and cannot be converted into or unlinked as personal accounts outside that enterprise.



A GitHub Enterprise administrator is planning to implement SAML SSO across their company.
Which of the following correctly distinguishes enterprise-wide SAML SSO from organization-level SAML SSO?

  1. Enterprise-wide SAML SSO requires less initial administrative overhead than organization-level implementation.
  2. Enterprise-wide SAML SSO allows different organizations to use different authentication methods.
  3. Enterprise-wide SAML SSO immediately removes users who fail to authenticate via the IdP.
  4. Enterprise-wide SAML SSO ensures users authenticate through the same IdP across all organizations.

Answer(s): D

Explanation:

Enterprise-wide SAML SSO enforces a single IdP across all member organizations--its configuration overrides any per-organization SAML settings, so everyone must authenticate through the same provider.



What distinguishes Enterprise Managed Users (EMUs) from standard GitHub accounts?

  1. EMUs are fully controlled by an IdP and cannot log in with personal credentials
  2. EMUs can only be created using email invites
  3. EMUs are managed in GitHub and use GitHub authentication
  4. EMUs are only available for GitHub Enterprise Server

Answer(s): A

Explanation:

EMU accounts are provisioned and authenticated exclusively through your identity provider - users sign in via the IdP and cannot use or manage GitHub-native credentials.



Your organization is implementing team synchronization.
Which of the following should you prioritize during the setup process?

  1. Disabling the audit log stream
  2. Setting an infrequent sync schedule to reduce performance impact
  3. Allowing manual updates to team memberships
  4. Clearly define how identity provider groups will align with GitHub teams and roles

Answer(s): D

Explanation:

Before you enable team synchronization, you should clearly define how groups in your identity provider will map to GitHub teams and roles - ensuring that when the sync runs, users land in the correct teams with the right permissions.



What makes GitHub Apps a more secure choice for automation over OAuth Apps?

  1. GitHub Apps always require two-factor authentication.
  2. GitHub Apps can only be installed by organization owners.
  3. GitHub Apps are limited to read-only access and cannot write to repositories.
  4. GitHub Apps authenticate as an app with fine-grained permissions, not as a user.

Answer(s): D

Explanation:

GitHub Apps authenticate as themselves with fine-grained, installation-scoped permissions and short-lived tokens - rather than inheriting a user's broad OAuth scopes - minimizing blast radius and aligning with least-privilege principles.



Why would a GitHub App be favored over a machine account for automation tasks?

  1. Machine accounts are required for webhook delivery.
  2. GitHub Apps provide a higher rate limit ceiling than using a personal access token on a machine account, when they use an install token and are owned by a GitHub Enterprise Cloud licensed enterprise.
  3. GitHub Apps are limited to a single repository.
  4. Machine accounts are easier to audit than GitHub Apps.

Answer(s): B

Explanation:

GitHub Apps authenticate with short-lived installation tokens scoped to fine-grained permissions and, when owned by a GitHub Enterprise Cloud organization, enjoy a higher rate limit (15,000 requests/hour) compared to a machine account's personal access token.



Viewing Page 2 of 10



Share your comments for Microsoft GH-100 exam with other users:

Tshegofatso 8/28/2023 11:51:00 AM

this website is very helpful
SOUTH AFRICA


philly 9/18/2023 2:40:00 PM

its my first time exam
SOUTH AFRICA


Beexam 9/4/2023 9:06:00 PM

correct answers are device configuration-enable the automatic installation of webview2 runtime. & policy management- prevent users from submitting feedback.
NEW ZEALAND


RAWI 7/9/2023 4:54:00 AM

is this dump still valid? today is 9-july-2023
SWEDEN


Annie 6/7/2023 3:46:00 AM

i need this exam.. please upload these are really helpful
PAKISTAN


Shubhra Rathi 8/26/2023 1:08:00 PM

please upload the oracle 1z0-1059-22 dumps
Anonymous


Shiji 10/15/2023 1:34:00 PM

very good questions
INDIA


Rita Rony 11/27/2023 1:36:00 PM

nice, first step to exams
Anonymous


Aloke Paul 9/11/2023 6:53:00 AM

is this valid for chfiv9 as well... as i am reker 3rd time...
CHINA


Calbert Francis 1/15/2024 8:19:00 PM

great exam for people taking 220-1101
UNITED STATES


Ayushi Baria 11/7/2023 7:44:00 AM

this is very helpfull for me
Anonymous


alma 8/25/2023 1:20:00 PM

just started preparing for the exam
UNITED KINGDOM


CW 7/10/2023 6:46:00 PM

these are the type of questions i need.
UNITED STATES


Nobody 8/30/2023 9:54:00 PM

does this actually work? are they the exam questions and answers word for word?
Anonymous


Salah 7/23/2023 9:46:00 AM

thanks for providing these questions
Anonymous


Ritu 9/15/2023 5:55:00 AM

interesting
CANADA


Ron 5/30/2023 8:33:00 AM

these dumps are pretty good.
Anonymous


Sowl 8/10/2023 6:22:00 PM

good questions
UNITED STATES


Blessious Phiri 8/15/2023 2:02:00 PM

dbua is used for upgrading oracle database
Anonymous


Richard 10/24/2023 6:12:00 AM

i am thrilled to say that i passed my amazon web services mls-c01 exam, thanks to study materials. they were comprehensive and well-structured, making my preparation efficient.
Anonymous


Janjua 5/22/2023 3:31:00 PM

please upload latest ibm ace c1000-056 dumps
GERMANY


Matt 12/30/2023 11:18:00 AM

if only explanations were provided...
FRANCE


Rasha 6/29/2023 8:23:00 PM

yes .. i need the dump if you can help me
Anonymous


Anonymous 7/25/2023 8:05:00 AM

good morning, could you please upload this exam again?
SPAIN


AJ 9/24/2023 9:32:00 AM

hi please upload sre foundation and practitioner exam questions
Anonymous


peter parker 8/10/2023 10:59:00 AM

the exam is listed as 80 questions with a pass mark of 70%, how is your 50 questions related?
Anonymous


Berihun 7/13/2023 7:29:00 AM

all questions are so important and covers all ccna modules
Anonymous


nspk 1/19/2024 12:53:00 AM

q 44. ans:- b (goto setup > order settings > select enable optional price books for orders) reference link --> https://resources.docs.salesforce.com/latest/latest/en-us/sfdc/pdf/sfom_impl_b2b_b2b2c.pdf(decide whether you want to enable the optional price books feature. if so, select enable optional price books for orders. you can use orders in salesforce while managing price books in an external platform. if you’re using d2c commerce, you must select enable optional price books for orders.)
Anonymous


Muhammad Rawish Siddiqui 12/2/2023 5:28:00 AM

"cost of replacing data if it were lost" is also correct.
SAUDI ARABIA


Anonymous 7/14/2023 3:17:00 AM

pls upload the questions
UNITED STATES


Mukesh 7/10/2023 4:14:00 PM

good questions
UNITED KINGDOM


Elie Abou Chrouch 12/11/2023 3:38:00 AM

question 182 - correct answer is d. ethernet frame length is 64 - 1518b. length of user data containing is that frame: 46 - 1500b.
Anonymous


Damien 9/23/2023 8:37:00 AM

i need this exam pls
Anonymous


Nani 9/10/2023 12:02:00 PM

its required for me, please make it enable to access. thanks
UNITED STATES