GitHub Exam GitHub-Actions Topic 2 Question 10 Discussion

Actual exam question for GitHub's GitHub-Actions exam

Question #: 10
Topic #: 2

As a developer, you need to make sure that only actions from trusted sources are available for use in your GitHub Enterprise Cloud organization. Which of the following statements are true? (Choose three.)

ASpecific actions can individually be enabled for the organization, including version information.

BGitHub-verified actions can be collectively enabled for use in the enterprise.

CActions can be restricted to only those available in the enterprise.

DActions created by GitHub are automatically enabled and cannot be disabled.

EIndividual third-party actions enabled with a specific tag will prevent updated versions of the action from introducing vulnerabilities.

FActions can be published to an internal marketplace.

Show Suggested Answer

Suggested Answer: A, B, F

You can enable specific actions for the organization by identifying them and providing version control, ensuring only trusted versions are used in workflows.

GitHub-verified actions can be enabled at the enterprise level, providing an extra layer of security by ensuring that only trusted actions are available to workflows.

Actions can be published to an internal marketplace, allowing organizations to share reusable actions securely within their enterprise without exposing them to the public.

by Otis at Mar 24, 2025, 01:58 AM

Limited Time Offer

25%

25 days ago

Haha, I'd go with A, B, and F. Might as well enable all the GitHub-verified actions, right? What could go wrong?

upvoted 0 times

Noel

8 days ago

A) Specific actions can individually be enabled for the organization, including version information.

upvoted 0 times

...

19 days ago

I agree, we need to prioritize security in our organization.

upvoted 0 times

...