GitHub GH-100 exam guide covering organization policy, teams, permissions, and governance decisions.
This GitHub Administration guide helps GH-100 candidates focus on what the exam tests, where close answers usually split, and which review page to use next.
Use the study plan to group permissions, workflow, and security choices, the cheat sheet for workflow recall, the sample questions for explanation-heavy practice, the FAQ for scope checks, the resources page for GitHub exam references, and the glossary when feature names blur together.
| Item | Guide value |
|---|---|
| Vendor | GitHub |
| Exam or credential | GitHub Administration |
| Code or shorthand | GH-100 |
| Study level | GitHub administration |
| IT Mastery page | GH-100 exam page |
| Guide shape | Start-here page, study plan, cheat sheet, sample questions, FAQ, resources, and glossary. |
| Lane | What to master | Common weak answer |
|---|---|---|
| Organization management | Manage users, teams, roles, repository ownership, invitations, and access reviews. | Granting direct user access when team-based access gives cleaner control. |
| Repository governance | Use rulesets, branch protection, default settings, templates, visibility, and archive policies. | Leaving critical repositories without required reviews or checks. |
| Enterprise controls | Understand SAML, SCIM, EMU concepts, audit logs, policies, and compliance settings. | Mixing identity-provider lifecycle with local GitHub account administration. |
| Security administration | Configure security features, alerts, secret scanning, code scanning, Dependabot, and audit workflow. | Enabling features without ownership and triage processes. |
| Automation and integration | Manage apps, tokens, webhooks, APIs, runners, and actions policies. | Installing integrations with more permissions than the use case requires. |
Administration questions reward clean governance: identity source, team access, repository policy, audit, and least-privilege integrations.
Use the current GitHub exam page for live exam details, including name, status, pricing, duration, delivery method, languages, retirement or beta changes, and domain weights where applicable.