Microsoft · GH-200
Validates proficiency in automating workflows and accelerating development with GitHub Actions, covering workflow creation, automation, CI/CD pipeline management, and enterprise-level strategies.
Practice Questions
310
≈ 6 practice exams
Duration
100 minutes
Passing Score
Not publicly disclosed
Difficulty
IntermediateLast Updated
Jan 2026
Use this GH-200 practice exam to prepare for GitHub Actions (GH-200) with realistic questions, detailed explanations, and focused study modes. The practice bank includes 310 questions for Microsoft GH-200, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to recurring topics such as Author and maintain workflows (40%), Consume workflows (20%), Author and maintain actions (25%), and Manage GitHub Actions for the enterprise (15%). Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
The GitHub Actions certification (GH-200) is an intermediate-level credential issued by GitHub and delivered through Microsoft's certification ecosystem via Pearson VUE. It validates expertise in automating software development workflows using GitHub Actions, covering the full lifecycle from authoring event-driven workflows and custom actions to managing automation at enterprise scale. The exam was significantly updated in January 2026, adding new objectives around security hardening, OIDC federation, artifact attestations, and YAML tooling, reflecting the platform's rapid evolution.
The certification spans five functional domains: authoring and managing workflows, consuming and troubleshooting workflows, authoring and maintaining actions, managing GitHub Actions for the enterprise, and securing and optimizing automation. Candidates are assessed on practical skills such as configuring matrix strategies, implementing reusable workflows, scoping GITHUB_TOKEN permissions, pinning third-party actions to full commit SHAs, and enforcing organization-level action usage policies. The exam emphasizes applied problem-solving over theoretical knowledge, making hands-on experience with GitHub Actions a prerequisite to success.
This certification is designed for DevOps engineers, software developers, build and release engineers, platform engineers, and technical team leads who work with GitHub Actions at an intermediate or advanced level. Suitable candidates are already comfortable reading and writing YAML workflow files, understand CI/CD concepts, and have direct experience navigating GitHub repositories, workflow run logs, and Actions configuration.
The credential is particularly valuable for professionals responsible for designing and maintaining CI/CD pipelines, scaling automation infrastructure across teams, and enforcing security and governance policies within GitHub organizations and enterprises. Solution architects who specify automation strategies and students pursuing DevOps career paths are also recognized target roles by Microsoft.
There are no formal prerequisites or mandatory prior certifications required to sit for GH-200. However, the exam is pitched at an intermediate level, and Microsoft recommends that candidates have hands-on experience automating software development workflows with GitHub Actions before attempting it. Familiarity with CI/CD principles, GitHub repositories, GitHub Packages, and integrating third-party services is expected.
Candidates should be comfortable with YAML syntax (including anchors, aliases, and merge keys), understand GitHub-hosted and self-hosted runner behavior, and have working knowledge of security concepts such as encrypted secrets, environment protections, OIDC token-based cloud federation, and the GITHUB_TOKEN lifecycle. Completing the Microsoft Learn path 'Automate your workflow with GitHub Actions' is the officially recommended preparatory resource.
The GH-200 exam is administered by Pearson VUE and allows 100 minutes to complete. It is available in English, Spanish, Portuguese (Brazil), Korean, and Japanese, with an additional 30 minutes granted if the exam is taken in a non-native language. The exam is proctored and may include interactive components in addition to standard question types; candidates can preview the interface via the official exam sandbox at GHCertDemo.starttest.com before exam day.
A score of 700 or greater (on a scale typically up to 1000) is required to pass. The exact number of questions is not publicly disclosed by Microsoft, and the exam may include unscored pilot questions. If a candidate fails, a retake is permitted after a 24-hour waiting period; subsequent retakes follow Microsoft's standard retake policy. The exam is priced based on the country or region where it is proctored, with a typical cost of approximately $99 USD.
The GH-200 certification signals specialized proficiency in GitHub Actions to employers at a time when CI/CD automation skills are a standard expectation for mid- to senior-level DevOps, platform engineering, and build engineering roles. GitHub is one of the most widely used development platforms globally, and Actions has become a dominant workflow automation tool, making this credential directly relevant to a broad range of job descriptions. Certified professionals are well-positioned for roles including DevOps Engineer, Platform Engineer, Build and Release Engineer, and Software Automation Engineer.
Salary impact varies by region and experience level, but DevOps and automation-focused engineers in the United States typically earn between $120,000 and $180,000 USD annually, with the certification serving as a differentiator during hiring and promotion discussions. According to Pearson VUE's Value of IT Certification research, 32% of certified professionals receive salary increases after earning a credential, and 79% report producing higher quality work. Compared to broader cloud certifications, GH-200 is narrowly focused on GitHub's native toolchain, making it a strong complement to cloud provider certifications (AWS, Azure, GCP) rather than a replacement — candidates with both categories of credentials demonstrate end-to-end CI/CD and deployment pipeline expertise.
5 sample questions with answers and explanations. The full bank has 310 questions, enough for 6 full-length practice exams.
Preview — answers shown1. PackageManagement Automation Corp wants to implement sophisticated package lifecycle management including automated cleanup, version management, and integration with external systems. What GitHub features enable advanced package management automation?
Explanation
GitHub Packages supports comprehensive automation through multiple channels: GitHub REST API and GraphQL API for programmatic package management, webhooks for responding to package events (like publishing new versions), and GitHub Actions for automated workflows. These features enable sophisticated scenarios like automatic cleanup of old package versions, integration with external systems, automated notifications, and complex package lifecycle management. For example, webhooks can trigger external processes when packages are published, and GitHub Actions can automate package maintenance tasks.
2. RunnerSelection Industries has diverse workloads including web applications, machine learning models, and mobile apps with different resource requirements and security needs. What factors should guide their decision between GitHub-hosted and self-hosted runners?
Explanation
Runner selection should be based on specific workload requirements (computational needs, specialized hardware), security requirements (network access, compliance needs), resource constraints (cost, performance), and maintenance capacity (automatic vs manual updates). GitHub-hosted runners provide automatic maintenance and scaling but have standardized configurations, while self-hosted runners offer customization and network access but require manual maintenance. Consider factors like GPU requirements for ML, network access for internal systems, compliance needs, and cost optimization when selecting appropriate runners.
3. SecretScoping Industries needs to implement a hierarchical secret management strategy across their enterprise with different access levels for various types of sensitive information. What secret scoping levels are available in GitHub Enterprise?
Explanation
GitHub Enterprise provides four levels of secret scoping: enterprise-level secrets (available across all organizations in GHEC), organization-level secrets (shared across multiple repositories with access policies), repository-level secrets (specific to individual repositories), and environment-level secrets (scoped to specific deployment environments). This hierarchical approach enables appropriate access control where shared infrastructure credentials use higher-level scoping while project-specific secrets remain isolated. Each level provides different access controls and inheritance patterns for comprehensive secret management.
4. CustomRetention Corporation has different artifact types with varying importance levels and wants to implement tiered retention policies. Critical deployment artifacts should be kept longer while temporary build files can be deleted sooner. How can they implement custom artifact retention periods?
Explanation
Implement custom artifact retention using the retention-days parameter in upload-artifact actions to specify retention periods for individual artifacts. For example, use retention-days: 30 for temporary build files and retention-days: 180 for critical deployment artifacts. This approach enables tiered retention policies where different artifact types have appropriate retention periods based on their importance and usage patterns. Custom retention overrides default repository settings and provides granular control over artifact lifecycle management and storage costs.
5. ActionTypes Corporation is planning their GitHub Actions development strategy and needs to understand the available action categories for different automation scenarios. The architecture team requires knowledge of all supported action types to make informed design decisions. What are the three primary types of GitHub Actions?
Explanation
The three primary types of GitHub Actions are container actions, JavaScript actions, and composite actions. Container actions run in Docker containers and support any programming language, making them suitable for complex or language-specific automation tasks. JavaScript actions run directly on the runner using Node.js and provide fast execution for JavaScript-based automation. Composite actions combine multiple workflow steps into a single reusable action, enabling modular workflow design without requiring custom code. Each type serves different use cases and offers distinct advantages for various automation scenarios.
Microsoft Certified: Dynamics 365 Supply Chain Management Functional Consultant Associate (MB-330)
MB-330 · 920 questions
Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)
MD-102 · 723 questions
Microsoft Certified: Fabric Data Engineer Associate (DP-700)
DP-700 · 819 questions
GitHub Administration (GH-100)
GH-100 · 447 questions
GitHub Advanced Security (GH-500)
GH-500 · 299 questions
GitHub Copilot (GH-300)
GH-300 · 352 questions
$17.99
One-time access to this exam