Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GitHub Exam GitHub-Actions Topic 2 Question 10 Discussion

Actual exam question for GitHub's GitHub-Actions exam
Question #: 10
Topic #: 2
[All GitHub-Actions Questions]

As a developer, you need to make sure that only actions from trusted sources are available for use in your GitHub Enterprise Cloud organization. Which of the following statements are true? (Choose three.)

Show Suggested Answer Hide Answer
Suggested Answer: A, B, F

You can enable specific actions for the organization by identifying them and providing version control, ensuring only trusted versions are used in workflows.

GitHub-verified actions can be enabled at the enterprise level, providing an extra layer of security by ensuring that only trusted actions are available to workflows.

Actions can be published to an internal marketplace, allowing organizations to share reusable actions securely within their enterprise without exposing them to the public.


Contribute your Thoughts:

Gilma
2 months ago
I'm not sure about D, but I think E and F are not true.
upvoted 0 times
...
Makeda
2 months ago
I'd go with B, C, and F. Can't be too careful these days, especially with all the GitHub bot takeovers happening. Gotta stay on top of our security game!
upvoted 0 times
Meaghan
28 days ago
F) Actions can be published to an internal marketplace.
upvoted 0 times
...
Dortha
29 days ago
C) Actions can be restricted to only those available in the enterprise.
upvoted 0 times
...
Alana
1 months ago
B) GitHub-verified actions can be collectively enabled for use in the enterprise.
upvoted 0 times
...
...
Yuonne
2 months ago
I agree with Quinn. Enabling specific actions and restricting to enterprise ones makes sense.
upvoted 0 times
...
Ellsworth
2 months ago
Oh man, remember that one time I enabled a shady action and it wiped our entire codebase? Yeah, me neither. B, C, and F are the way to go!
upvoted 0 times
...
Josephine
2 months ago
Definitely B, C, and F. We don't want any rogue actions messing with our organization. Gotta keep it locked down tight!
upvoted 0 times
...
Quinn
2 months ago
I think A, B, and C are true.
upvoted 0 times
...
Laurena
2 months ago
Haha, I'd go with A, B, and F. Might as well enable all the GitHub-verified actions, right? What could go wrong?
upvoted 0 times
Truman
1 months ago
F) Actions can be published to an internal marketplace.
upvoted 0 times
...
Cherry
1 months ago
B) GitHub-verified actions can be collectively enabled for use in the enterprise.
upvoted 0 times
...
Noel
2 months ago
A) Specific actions can individually be enabled for the organization, including version information.
upvoted 0 times
...
...
Earleen
2 months ago
I think options B, C, and F are the correct ones. Gotta make sure our enterprise is secure, you know?
upvoted 0 times
Ilda
2 months ago
Publishing actions to an internal marketplace can also help ensure that only trusted sources are used.
upvoted 0 times
...
Tess
2 months ago
Enabling GitHub-verified actions and restricting actions to only those available in the enterprise are definitely important steps.
upvoted 0 times
...
Valentin
2 months ago
I agree, we need to prioritize security in our organization.
upvoted 0 times
...
...

Save Cancel