GitHub Foundations Practice Exam 2025: Latest Questions

A new developer is confused about why their code changes are not affecting other collaborators after they ran `git commit`. Which statement best explains what a commit does?

You want to contribute a fix to an open-source repository that you do not have write access to. What is the recommended GitHub workflow?

Your team wants to reduce back-and-forth during code reviews by indicating required changes and optional suggestions clearly. Which GitHub pull request review feature is designed for this?

A repository should prevent direct pushes to the default branch and require reviews before changes are merged. Which GitHub feature enforces this policy?

A developer created a new branch and committed changes, but `git push` fails with an error indicating the upstream branch is not set. What is the most appropriate fix?

You want all changes to the default branch to be deployed automatically when a pull request is merged. Where should the automation definition typically be stored in the repository when using GitHub Actions?

A team wants to ensure every pull request references a work item and follows a consistent checklist before merging. Which approach best supports this requirement in GitHub?

A repository’s `main` branch is behind the base branch in an open pull request, and GitHub indicates there are merge conflicts. What is the best next step to resolve the conflicts while keeping review history intact?

An organization requires that commits on the default branch must be cryptographically verifiable and that pull requests cannot be merged unless checks pass. Which combination best meets this requirement?

A security team wants to reduce the risk of secrets being committed to repositories and also detect known vulnerable dependencies in pull requests. Which GitHub features best address these needs?

You want to preview and discuss documentation changes on GitHub without needing to run any tooling locally. Which GitHub feature best supports this workflow?

A team wants to keep their repository’s main branch in a constantly deployable state. Which practice best supports this goal?

You accidentally committed a secrets file to your local Git repository but have not pushed it to GitHub. What is the best immediate action to prevent it from being committed again?

A repository uses CODEOWNERS to require reviews from the security team when certain files are changed. A developer opens a PR that modifies those files, but no automatic review request is created. What is the most likely cause?

Your team wants to ensure every PR includes a risk assessment and testing steps. Which GitHub feature best enforces this consistently?

A developer can successfully clone a repository but cannot push changes back to it. Which explanation is most likely?

A repository has many open issues. You want an easy way to automatically close an issue when a PR is merged. What should the PR description include?

You need to create an isolated environment to propose changes to an existing GitHub repository without granting yourself write access to the original repository. Which approach should you use?

An organization wants to restrict which third-party GitHub Apps can access its private repositories, while still allowing approved apps for automation. Which organization-level control best addresses this requirement?

Your repository requires two approving reviews before merging to main. A PR has two approvals, but the Merge button is still disabled. Builds have passed. What is the most likely explanation?

A team wants to ensure every pull request (PR) has at least one reviewer approval before it can be merged into the default branch. Which GitHub feature should they configure?

A developer clones a repository, creates a new branch, commits changes locally, and then runs `git push`. The push fails because the branch does not exist on the remote yet. What should the developer do to publish the branch and set the remote tracking relationship?

A repository owner wants to give an external contributor a way to propose changes, but does not want to grant them write access to the repository. Which approach best supports this?

A team wants to prevent commits to the default branch that include secrets. They decide to use GitHub’s built-in security capabilities to detect exposed tokens and alert maintainers. Which GitHub feature should they enable?

A project uses a protected default branch that requires PR reviews. A contributor says their pull request cannot be merged because it shows “Required status check is expected.” What is the most likely cause?