Which of the following is a key benefit of setting default read permissions across organizations?

1. A. Suits environments where all users need write access.
2. B. Improves collaboration by allowing users to modify content directly.
3. C. Increases efficiency in content creation and updates.
4. D. Enhances security by minimizing unintended modifications.

Correct Answer: D
Enforcing a default of Read for organization members ensures they can view content without the ability to push changes, reducing the risk of accidental or unauthorized modifications.

Why would a GitHub App be favored over a machine account for automation tasks?

1. A. Machine accounts are required for webhook delivery.
2. B. GitHub Apps provide a higher rate limit ceiling than using a personal access token on a machine account, when they use an install token and are owned by a GitHub Enterprise Cloud licensed enterprise.
3. C. GitHub Apps are limited to a single repository.
4. D. Machine accounts are easier to audit than GitHub Apps.

Correct Answer: B
GitHub Apps authenticate with short‑lived installation tokens scoped to fine‑grained permissions and, when owned by a GitHub Enterprise Cloud organization, enjoy a higher rate limit (15,000 requests/hour) compared to a machine account's personal access token.

You are an administrator and need to enforce a policy on forking private and internal repositories. Which options are available for configuring the policy at the enterprise level? (Each answer presents a complete solution. Choose three.)

1. A. Allow organization owners to administer the setting at the organization level.
2. B. Allow people who have access to private and internal repositories to fork these repositories.
3. C. Allow specific people or teams to fork private and internal repositories.
4. D. Disallow repository owners from administering the setting at the repository level.
5. E. Disallow forking of private and internal repositories.

Correct Answer: ABE
You can configure the enterprise policy to allow organization owners to administer the forking setting at the organization level, giving them control over how repos fork within their orgs.
You can choose to allow any user who already has access to a private or internal repo to fork it.
You can also set the policy to never allow forking of private or internal repositories across all organizations.

Which of the following accurately contrasts a GitHub App and a GitHub Action?

1. A. GitHub Apps can only be used inside .github/workflows
2. B. GitHub Actions are limited to reading repository content only
3. C. GitHub Apps run only on GitHub-provided virtual machines, while GitHub Actions run only on customer-hosted machines
4. D. GitHub Actions can only be used to respond to events within a single repository while GitHub Apps can respond to events from multiple repositories

Correct Answer: D
GitHub Actions workflows are defined and triggered within a single repository??s context, whereas GitHub Apps are installed at the organization or user level and can subscribe to events across multiple repositories.

What is a key characteristic of GitHub Enterprise Server (GHES) compared to GitHub Enterprise Cloud (GHEC)?

1. A. GHES is hosted by GitHub and offers automatic scaling, while GHEC requires self-hosting.
2. B. GHEC offers data residency options in regions that GHES does not support.
3. C. GHES allows enterprises to have complete control over their hosting environment, including data storage and network security policies.
4. D. GHES users cannot integrate with external identity providers for authentication.

Correct Answer: C
GitHub Enterprise Server is a self‑hosted product you install and manage on your own infrastructure - giving you full control over data storage, network security policies, and the underlying environment.