As a developer, you need to use GitHub Actions to deploy a microservice that requires runtime access to a secure token. This token is used by a variety of other microservices managed by different teams in different repos. To minimize management overhead and ensure the token is secure, which mechanisms should you use to store and access the token? (Each correct answer presents a complete solution. Choose two.)

• A.Store the token as a GitHub encrypted secret in the same repo as the code. During deployment, use GitHub Actions to store the secret in an environment variable that can be accessed at runtime.
• B.Use a corporate non-GitHub secret store (e.g., HashiCorp Vault) to store the token. During deployment, use GitHub Actions to store the secret in an environment variable that can be accessed at runtime.
• C.Store the token as an organizational-level encrypted secret in GitHub. During deployment, use GitHub Actions to store the secret in an environment variable that can be accessed at runtime.
• D.Store the token as a GitHub encrypted secret in the same repo as the code. Create a reusable custom GitHub Action to access the token by the microservice at runtime.
• E.Store the token in a configuration file in a private repository. Use GitHub Actions to deploy the configuration file to the runtime environment.

Comment: *

Name: *

Email: *

Verification: *

What metadata file in a custom action defines the main entry point?

• A.action.js
• B.index.js
• C.action.yml
• D.main.yml

Comment: *

Name: *

Email: *

Verification: *

You are a DevOps engineer in ABC Corp. You need to schedule your deployment workflow twice a week at 7:45 UTC every Wednesday and Saturday. What is the appropriate YAML structure?

• A.on:
  cron: '45 7 * * 3,6'
• B.on:
  cron:
  - schedule: '45 7 * * 3,6'
• C.on:
  schedule:
  - cron: '45 7 * * 3,6'
• D.on:
  schedule: '45 7 * * 3,6'

Comment: *

Name: *

Email: *

Verification: *

As a developer, you are optimizing a GitHub workflow that uses and produces many different files. You need to determine when to use caching versus workflow artifacts. Which two statements are true? (Choose two.)

• A.Use caching when reusing files that change rarely between jobs or workflow runs.
• B.Use artifacts when referencing files produced by a job after a workflow has ended.
• C.Use caching to store cache entries for up to 30 days between accesses.
• D.Use artifacts to access the GitHub Package Registry and download a package for a workflow

Comment: *

Name: *

Email: *

Verification: *

A single secret must be accessed by workflows in specific repositories. What is the best way to create the secret?

• A.Create an environment secret at the organization level and leverage that environment in each of the specified repositories.
• B.Create an organization secret, specify Selected repositories as the Repository access, and select the required repositories.
• C.Create the secret in one of the repositories, check the Share secret option, and select the required repositories.
• D.Store the secret in a supported external key vault. Configure OpenID Connect (OIDC) to allow access to the external vault and link the secret from the external key vault in each of the specific repositories.

Comment: *

Name: *

Email: *

Verification: *