GitHub Actions Practice Exam

Who it is for

• DevOps engineers, developers, and administrators preparing for GitHub Actions (GH-200).
• Practitioners who already use GitHub repositories and CI/CD and need exam-style practice on workflows, custom actions, enterprise controls, and secure automation.

What this exam covers

• Author and manage workflows — 20–25%
• Consume and troubleshoot workflows — 15–20%
• Author and maintain actions — 15–20%
• Manage GitHub Actions for the enterprise — 20–25%
• Secure and optimize automation — 10–15%

What you will practice

• Choose workflow triggers, permissions, and reusable workflow inputs and secrets, then structure jobs with needs, matrices, services, and expressions.
• Diagnose failed runs from logs and history, interpret matrix jobs, manage artifacts, and distinguish starter templates from reusable workflows and composite actions.
• Build and version custom actions, write action metadata, and decide when to publish privately, inside an organization, or on the GitHub Marketplace.
• Apply organization and enterprise Actions policies, manage hosted and self-hosted runners and runner groups, and scope encrypted secrets and configuration variables.
• Harden automation with environments, OIDC, SHA pinning, script-injection defenses, artifact attestations, and cache or artifact retention for cost and performance.

About this practice exam

This exam is designed for DevOps engineers, software developers, and IT professionals with intermediate experience automating software development with GitHub Actions. It covers creating and maintaining workflows and actions, managing GitHub Actions at scale, and keeping automation secure and efficient. Candidates should also be familiar with CI/CD, GitHub repositories, GitHub Packages, and integrating third-party services.

The official GitHub Actions exam (GH-200) is a 100-minute proctored assessment. Microsoft publishes a scaled passing score of 700 and does not publish a fixed question count. Skills measured as of January 2026 are listed below.

The certification validates understanding of:

• Authoring workflows: events and triggers, jobs and steps, matrices, contexts and expressions, reusable workflows, artifacts, caches, and job outputs.
• Consuming and troubleshooting runs: logs, matrix failures, artifacts, starter versus reusable versus composite patterns, and disabling versus deleting workflows.
• Authoring custom JavaScript, Docker, and composite actions, plus metadata, versioning, and GitHub Marketplace publishing.
• Enterprise operations: organization and enterprise Actions policies, GitHub-hosted and self-hosted runners, runner groups, and secrets and variables at organization, repository, and environment scope.
• Security and efficiency: environment protections, least-privilege GITHUB_TOKEN, OIDC, pinning actions to commit SHAs, artifact attestations, and cache and artifact retention.