Microsoft GH-200 - GitHub Actions Exam

GitHub ' s current documentation states that when an organization uses an IP allow list with GitHub Actions, the appropriate choices are self-hosted runners or GitHub-hosted larger runners configured with static IP address ranges. A self-hosted runner has an address controlled by the organization, so its IP address or range can be explicitly added to the allow list. Larger GitHub-hosted runners can likewise be configured with predictable static IP ranges. Standard GitHub-hosted runners normally use dynamically assigned addresses from large shared ranges, and GitHub specifically recommends against relying on those ranges for this scenario. Marketplace action availability itself is not controlled by adding generic Actions IP ranges as option A suggests. Therefore, the solutions consistent with current GitHub Enterprise Cloud guidance are larger runners with static addresses and self-hosted runners with known addresses.

================

GITHUB_RUN_NUMBER is one of the default environment variables automatically created by GitHub for every workflow run. It contains a unique sequential number for each run of a particular workflow in a repository. When referenced from a shell command on a Linux runner, the correct environment-variable syntax is $GITHUB_RUN_NUMBER, making option A correct. GitHub also explains that default environment variables are not members of the env context, so ${{ env.GITHUB_RUN_NUMBER }} is not the appropriate workflow expression. The equivalent GitHub context property is ${{ github.run_number }}, but that exact expression is not one of the answer choices. The vars context is intended for configuration variables explicitly created by users or administrators. Therefore, among the supplied choices, $GITHUB_RUN_NUMBER is the documented valid reference.

================

To prevent reaching the storage limit for GitHub artifacts and packages, you should manage and clean up artifacts and packages stored in repositories owned by your organization. This includes deleting unnecessary artifacts and managing the lifecycle of packages, as they contribute directly to your organization ' s storage quota.

The Actions tab on the main page of the repository is where you can find detailed information about the workflow runs, including step failures and build logs. You can review the status of each job and step within the workflow, see the failure messages, and access logs for debugging.

The correct syntax for specifying a cleanup script to be run after the main entry point is executed in a Docker-based GitHub Action is to use the post key. This ensures that cleanup.sh runs after the main script (main.sh) has completed.

GitHub ' s REST API provides a dedicated Download workflow run logs endpoint. The request uses the HTTP GET method and the path /repos/{owner}/{repo}/actions/runs/{run_id}/logs. GitHub responds with a redirect to an archive containing the log files for that workflow run. The endpoint requires the repository owner, repository name, and workflow run ID. For private repositories, the caller must authenticate with appropriate repository or Actions read permissions. A POST request is not used because retrieving logs is a read operation. The artifacts endpoint manages workflow artifacts rather than workflow execution logs. Therefore, option A exactly matches the current GitHub REST API endpoint documented for downloading the log archive associated with a workflow run.

================

The pull_request event supports activity-type filtering, including the labeled activity, so a workflow can respond when a label is added to a pull request. The branches filter limits execution according to the pull request ' s target or base branch, while the paths filter limits execution according to changed files. GitHub also states that when branch and path filters are both configured, both conditions must be satisfied . Therefore, a pull request targeting releases, containing a change beneath apps/**, and receiving a label matches option C. pull_request_review concerns review activity rather than labeling, and pull_request_label is not a GitHub Actions workflow event. Option B also uses filters that do not accurately represent the stated exact branch and folder requirement.

================

Caching is ideal for files that change rarely, such as dependencies or build outputs, as it speeds up subsequent workflow runs by reusing previously cached files instead of re-downloading or rebuilding them.

Artifacts are used for persisting files produced during a job that need to be used in later jobs or after the workflow has ended, allowing them to be downloaded or referenced later.

The GITHUB_REPOSITORY environment variable contains the owner and repository name in the format owner/repository. It is automatically provided by GitHub Actions and can be used to reference the repository in workflows.