GH-100 exam domains
The GH-100 exam is weighted across 5 domains. Pick any domain below to drill it — or read the full breakdown in the FAQ.
| Exam domain | Exam weight | Practice |
|---|---|---|
| Manage GitHub identities and access | 19% | Practice this topic |
| Administer GitHub Enterprise environment | 14% | Practice this topic |
| Implement secure software development and compliance | 29% | Practice this topic |
| Manage GitHub Actions | 24% | Practice this topic |
| Monitor and optimize GitHub usage | 14% | Practice this topic |
Sample GH-100 questions
A sample of the GH-100 questions on this hub. Each links through to the full question, the correct answer, and an explanation of why every other option is wrong.
- An enterprise administrator reviews the monthly Actions metered usage report and notices a sharp cost increase driven by one organization's CI workflo…View question
- You are the enterprise administrator for a GitHub Enterprise Cloud account with 12 organizations. Finance has asked you to produce an internal chargeb…View question
- An enterprise owner notices that a compromised third-party action in one repository was able to push commits and create releases using the automatical…View question
- An enterprise administrator receives complaints that a custom internal integration, which uses a GitHub App to bulk-create issues across hundreds of r…View question
- An enterprise admin is investigating why a scheduled internal reporting tool that pulls repository metadata via the GitHub REST API intermittently fai…View question
- An enterprise owner is reviewing suspicious activity where several repositories had their visibility changed to public overnight. Using the audit log,…View question
- A security incident report indicates that a repository's default branch protection was disabled sometime between 14:00 and 15:00 UTC on a specific day…View question
- Your compliance team requires that all enterprise audit log events on GitHub Enterprise Cloud be retained for seven years in a tamper-resistant store…View question
- An enterprise administrator runs a fleet of self-hosted runners on a Kubernetes cluster to handle bursty CI demand. They notice that after a job compl…View question
- Your enterprise runs security-sensitive CI/CD workflows on GitHub-hosted larger runners. The security team requires that all outbound traffic from the…View question
Key GH-100 terms
Start with these terms, then explore the full glossary. Each links to a plain-English definition written for the GH-100 exam.
GH-100 frequently asked questions
What is the GH-100 certification?+
GH-100 is the administrator-level certification in GitHub’s program, distinct from GitHub Foundations (fundamentals) and the GitHub Copilot certification.
It targets people who run GitHub for an organization, so success rewards practical knowledge of identity providers, rulesets, Actions policies, and GitHub Advanced Security.
What topics are on the GH-100 exam?+
The GH-100 exam is organised into five weighted domains. GitHub publishes each as a range (15–20%, 10–15%, 25–30%, 20–25%, 10–15%); the single percentages below are our editorial study weights within those ranges, so bias your study toward the heavier domains — Implement secure software development and compliance is the largest, followed by Manage GitHub Actions.
Manage GitHub identities and access (19%)
Covers managed users (EMU) vs personal accounts, enforcing SAML SSO and two-factor authentication, SCIM provisioning and team synchronization, choosing identity providers, and managing organization/repository roles, enterprise teams, and access auditing.
Administer GitHub Enterprise environment (14%)
Covers supporting users (admin vs GitHub Support responsibilities, support bundles and diagnostics), standards for workflows and branching, deployment scenarios (GHEC with EMU, Data Residency, personal accounts, and GHES), and licensing, billing, and license-usage monitoring.
Implement secure software development and compliance (29%)
The largest domain. Covers organization and enterprise security policies and rulesets, audit logging and reporting, repository security features (vulnerability alerts, secret scanning, CodeQL), Dependabot and security advisories, and API access with personal access tokens and GitHub Apps.
Manage GitHub Actions (24%)
Covers configuring and reusing actions and workflows across the enterprise, Actions policies, managing runner groups and GitHub-hosted vs self-hosted runners (including IP allow lists and Azure private networking), and managing encrypted secrets and third-party vault integration.
Monitor and optimize GitHub usage (14%)
Covers monitoring enterprise usage and activity through audit logs and API usage, distinguishing admin responsibilities from GitHub Support, evaluating adoption and underutilized features, and optimizing cost and performance from metered-product usage reports.
Is the GH-100 hard?+
GH-100 is challenging because it spans identity, governance, automation, and security across two deployment models, so you must know current GitHub Enterprise features and terminology precisely.
The heavy weighting on secure software development and Actions rewards hands-on administration experience. The difficulty is breadth of enterprise features, not obscure trivia.
How many questions are on the GH-100 exam and how long is it?+
GH-100 is a proctored multiple-choice exam of roughly 75 questions in 100 minutes; the certification covers administering both GitHub Enterprise Cloud and Server.
Our full-length practice mock uses a 60-question, 100-minute session so you can rehearse pacing across all five domains before test day.
What score do you need to pass the GH-100?+
GH-100 is scored on a scale of 100 to 1000, and you need 700 to pass. Because it is scaled, questions are not all worth the same and there is no penalty for guessing, so answer everything. Our practice mock uses a 70% threshold as a study checkpoint; aim comfortably beyond it before test day.
How much does the GH-100 exam cost?+
The GH-100 exam fee is set by GitHub and varies by region — check the GitHub certification site for current pricing. Everything on this hub is free.
Who should take the GH-100?+
GH-100 is aimed at administrators who manage GitHub Enterprise for their organization — platform engineers, DevOps engineers, and repository administrators.
GitHub recommends experience administering GitHub Enterprise, including identity and access, Actions, and enterprise governance, before attempting it.
What jobs and salaries can the GH-100 lead to?+
GH-100 maps to roles such as GitHub administrator, platform engineer, DevOps engineer, and developer-experience engineer.
How much any certification affects pay depends heavily on geography, seniority, and experience, so treat any single salary figure with caution. GH-100 is best viewed as proof that you can administer GitHub Enterprise securely at scale.
How long does it take to study for the GH-100?+
Candidates with GitHub administration experience often need four to six weeks, spent configuring identity, rulesets, Actions, and security features in a real enterprise or trial organization.
Review every explanation, including for questions you answered correctly, because GH-100 distractors are built from plausible but incorrect administration choices. Use the per-domain results here to find your weakest area, then finish with full-length timed mocks.
How should you prepare for the GH-100?+
Study the five domains above, giving the heaviest weight to secure software development and Actions, then drill scenario questions domain by domain while practicing in a GitHub Enterprise or trial organization. Every MockAPI question reveals a full explanation and tells you why each wrong answer is wrong.
When you can configure identity, rulesets, and Actions policies comfortably, move to full-length timed mocks. Use the glossary to keep concepts like EMU, SCIM, rulesets, CodeQL, and runner groups straight, and aim to score consistently above the checkpoint before you book.
Can you take the GH-100 exam online?+
Yes. GitHub delivers its certification exams through an online-proctored platform, so you take the exam remotely. You need a private, quiet room, a clear workspace, a webcam and microphone, a stable connection, and government-issued photo ID, with a proctor monitoring you and a room scan before you start.
If you do not pass, GitHub lets you retake the exam after a waiting period — check the current policy before rebooking.
What certification should you take after the GH-100?+
After GH-100, related GitHub certifications include GitHub Actions, GitHub Advanced Security, and the GitHub Copilot certification, depending on your focus.
For many, the real next step is running GitHub Enterprise for a large organization. Pairing GH-100 with hands-on administration is what turns the certificate into a career.