Free GitHub Enterprise Administrator Practice Questions

Sample Practice Questions

Try these 10 sample questions from the GitHub Enterprise Administrator practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1An enterprise wants its identity provider to create and control employees' GitHub accounts. Which identity model provides this capability?

   1. A. Personal accounts with organization SAML SSO
   2. B. Enterprise Managed Users with IdP provisioning
   3. C. Personal accounts with required two-factor authentication
   4. D. Personal accounts with synchronized organization teams

   Answer: B

   Explanation: The documentation states, "Your IdP provisions new user accounts on GitHub, with access to your enterprise." Enterprise Managed Users provides account lifecycle control; SSO, 2FA, and team synchronization on personal accounts do not themselves provision managed accounts.

   Reference: About Enterprise Managed Users — What are Enterprise Managed Users in GitHub?

2. 2GitHub Support requests an overview of a GitHub Enterprise Server 3.19 instance's settings and environment. The administrator has Management Console access but no SSH access. How can the administrator provide this overview?

   1. A. Export the repository's Git commit history as a diagnostic report.
   2. B. Download the instance diagnostic file through the Management Console.
   3. C. Export the organization's member list as the instance diagnostic file.
   4. D. Download a workflow artifact instead of an instance diagnostic file.

   Answer: B

   Explanation: The instructions state, "You can create a diagnostic file from the Management Console if you don't currently have SSH access." Repository history, a member list, and workflow artifacts do not supply the documented instance settings and environment diagnostics.

   Reference: Providing data to GitHub Support — Creating a diagnostic file from the Management Console

3. 3Two active rulesets target the same branch. One requires one pull request approval; the other requires four. Neither grants bypass to the contributor. How many approvals are required by the combined rules?

   1. A. One approval
   2. B. Two approvals
   3. C. Four approvals
   4. D. Five approvals

   Answer: C

   Explanation: The documentation states, "If the same rule is defined in different ways across the aggregated rulesets, the most restrictive version of the rule applies." The requirement is four, not the first rule, an average, or the sum of the approval counts.

   Reference: About rulesets — About rule layering

4. 4Which event must a workflow include in its on configuration to be callable as a reusable workflow?

   1. A. workflow_dispatch
   2. B. workflow_call
   3. C. workflow_run
   4. D. repository_dispatch

   Answer: B

   Explanation: The reuse guide states, "For a workflow to be reusable, the values for on must include workflow_call:" The other events have different triggering roles and do not declare this reusable-workflow interface.

   Reference: Reuse workflows — Creating a reusable workflow

5. 5An enterprise owner needs to find a non-Git audit event from four months ago, within the documented retention period. Why might it be absent from the default audit log display, and how should the owner search?

   1. A. The log permanently deletes all non-Git events after three months.
   2. B. Filter by actor only; that automatically expands the default date window.
   3. C. The default display covers three months; specify a date range with created.
   4. D. Filter by repository only; that automatically expands the default date window.

   Answer: C

   Explanation: The guide states, "By default, only events from the past three months are displayed." It adds, "To view older events, you must specify a date range with the created parameter." Actor or repository filtering does not replace the required date-range selection, and display defaults are not permanent deletion.

   Reference: Audit log for an enterprise — What are audit logs?

6. 6A developer needs to contribute to public repositories outside the employer's enterprise. What limitation must the administrator explain about the developer's managed user account?

   1. A. It can collaborate externally after authenticating to the external organization's IdP.
   2. B. It can collaborate externally when the IdP assigns it the enterprise owner role.
   3. C. It cannot collaborate outside the enterprise using that managed user account.
   4. D. It can collaborate externally when both enterprises use the same identity provider.

   Answer: C

   Explanation: The restriction is, "Managed user accounts cannot create public content or collaborate outside your enterprise." Neither an owner role nor shared or additional IdP authentication removes the managed-account enterprise boundary.

   Reference: About Enterprise Managed Users — What are Enterprise Managed Users in GitHub?

7. 7For GitHub Enterprise Server 3.19, which file type should an administrator collect when Support needs both instance diagnostics and recent sanitized logs?

   1. A. A plaintext diagnostic file
   2. B. An organization audit log export
   3. C. A repository source archive
   4. D. A support bundle archive

   Answer: D

   Explanation: The support bundle description states, "Contains a diagnostics file and sanitized log files from the past two days by default." A diagnostic file alone contains instance settings and environment information, while audit exports and source archives do not include that combined diagnostic package.

   Reference: Providing data to GitHub Support — About diagnostic files and support bundles — Support bundle row

8. 8An administrator needs to pause a ruleset's enforcement while preserving its configuration for later use. Which change provides this behavior?

   1. A. Set the ruleset's enforcement status to Disabled.
   2. B. Remove all repository collaborators from its bypass list.
   3. C. Add another active ruleset targeting the same branch.
   4. D. Rename the ruleset while keeping its status Active.

   Answer: A

   Explanation: The enforcement status definition is, "Disabled: your ruleset will not be enforced." Disabling preserves the ruleset; changing names, bypass actors, or adding another active ruleset does not pause its enforcement.

   Reference: About rulesets — Using ruleset enforcement statuses

9. 9Where must a reusable workflow YAML file be stored within its repository?

   1. A. Directly in the .github/workflows directory
   2. B. In any subdirectory under .github/workflows
   3. C. Directly in the .github/actions directory
   4. D. In any directory referenced by the caller's path

   Answer: A

   Explanation: The guide states, "As with other workflow files, you locate reusable workflows in the .github/workflows directory of a repository." It also states, "Subdirectories of the workflows directory are not supported." Reusable workflow storage is therefore more specific than any caller-selected file path.

   Reference: Reuse workflows — Creating a reusable workflow

10. 10In an enterprise audit log entry named repo.create, what do the two components identify?

    1. A. The repo event category and the create operation
    2. B. The repository owner named repo and the actor named create
    3. C. The repository named repo and the branch named create
    4. D. The repo permission role and the create authentication method

    Answer: A

    Explanation: The guide states, "The name for each audit log entry is composed of a category of events, followed by an operation type." Its repo.create example identifies create as the operation on the repo category; it does not encode an actor, branch, or role.

    Reference: Audit log for an enterprise — What are audit logs?