Microsoft GH-900: GitHub Foundations

Last checked October 22, 2026 against the official Microsoft exam page.

1. Question 1Git and GitHub fundamentals

   A developer has made changes to a file on a local branch and wants to save a snapshot of those changes in the project history. Which Git command creates the snapshot?

   1. Agit init
   2. Bgit pull
   3. Cgit push
   4. Dgit commit
   Show answer and explanationHide answer

   Correct answer: D

   git commit records the staged changes as a new snapshot in the local repository history. Cloning copies a remote repository, fetching downloads remote updates without merging, and init creates a new repository.

2. Question 2Collaboration and pull requests

   A pull request must not be merged until at least two reviewers approve it and the automated tests pass. Which GitHub feature enforces this?

   1. AA README file that asks reviewers to approve the pull request
   2. BBranch protection rules with required reviews and required status checks
   3. CA label named approved that reviewers add by hand after each round
   4. DA wiki page listing the reviewers and their approval status
   Show answer and explanationHide answer

   Correct answer: B

   Branch protection rules can require a number of approving reviews and passing status checks before merge, which enforces the policy. A README, a label or a wiki page is informational and does not block merging.

3. Question 3Security and compliance

   A developer accidentally committed an API token to a repository. What should happen first?

   1. APost the full token value in a new issue so that the whole team and every reviewer can see it and track it
   2. BLeave the token as it is because the repository is private and access is limited to trusted collaborators
   3. CRevoke the token and issue a new one, then remove the secret from the history if needed
   4. DDelete the latest commit with git reset --hard HEAD~1 and force push the branch, leaving the secret
   Show answer and explanationHide answer

   Correct answer: C

   A committed secret must be treated as compromised, so revoking and rotating it comes first, and history cleanup is secondary. Assuming privacy, deleting only the last commit and posting the token all leave the secret exposed.

4. Question 4GitHub Copilot and automation

   A developer wants AI-assisted code suggestions and chat inside the editor while writing code. Which GitHub product provides this?

   1. AGitHub Sponsors
   2. BGitHub Copilot
   3. CGitHub Gists
   4. DGitHub Pages
   Show answer and explanationHide answer

   Correct answer: B

   GitHub Copilot provides AI-assisted code suggestions and chat in supported editors. GitHub Pages hosts websites, Sponsors manages funding, and Gists store snippets.

5. Question 5Community and organizations

   A company wants to group its repositories and manage access for several teams from one place. Which GitHub structure should it use?

   1. AAn organization with teams and repository permissions
   2. BA single shared password for each department's repositories
   3. CA personal account for each developer, holding repositories
   4. DA public gist per team, each listing its members and their roles
   Show answer and explanationHide answer

   Correct answer: A

   Organizations group repositories and manage teams and permissions centrally, which suits a company. Individual accounts, shared passwords and gists do not provide centralized team management.