GitHub Exam GitHub-Actions Topic 2 Question 10 Discussion

Actual exam question for GitHub's GitHub-Actions exam

Question #: 10
Topic #: 2

As a developer, you need to make sure that only actions from trusted sources are available for use in your GitHub Enterprise Cloud organization. Which of the following statements are true? (Choose three.)

ASpecific actions can individually be enabled for the organization, including version information.

BGitHub-verified actions can be collectively enabled for use in the enterprise.

CActions can be restricted to only those available in the enterprise.

DActions created by GitHub are automatically enabled and cannot be disabled.

EIndividual third-party actions enabled with a specific tag will prevent updated versions of the action from introducing vulnerabilities.

FActions can be published to an internal marketplace.

Show Suggested Answer

Suggested Answer: A, B, F

You can enable specific actions for the organization by identifying them and providing version control, ensuring only trusted versions are used in workflows.

GitHub-verified actions can be enabled at the enterprise level, providing an extra layer of security by ensuring that only trusted actions are available to workflows.

Actions can be published to an internal marketplace, allowing organizations to share reusable actions securely within their enterprise without exposing them to the public.

by Otis at Mar 24, 2025, 01:58 AM

Limited Time Offer

25%

15 days ago

I think options B, C, and F are the correct ones. Gotta make sure our enterprise is secure, you know?

upvoted 0 times

Ilda

4 days ago

Publishing actions to an internal marketplace can also help ensure that only trusted sources are used.

upvoted 0 times

...

Tess

6 days ago

Enabling GitHub-verified actions and restricting actions to only those available in the enterprise are definitely important steps.

upvoted 0 times

...

Valentin

7 days ago

I agree, we need to prioritize security in our organization.

upvoted 0 times

...