Cloud · Regulatory
GitHub Actions Certification (GH-200): What to Expect
Key facts
Format: Multiple choice and multiple response, at a Pearson VUE testing center or online proctored
GitHub Actions certification (GH-200) is Microsoft's certification for GitHub's CI/CD platform, restructured into a five-group format in January 2026. Here is exactly what the exam tests, what it costs, and how to prepare, rather than a vague overview of what an automation certification is.
GH-200 tests workflow authoring and enterprise-scale management about equally, at 25 and 24 per cent respectively. Nearly half the exam sits in those two functional groups alone.
Practise the certifications in this article
- GitHub Actions (GH-200)GH-200 practice questionsGH-200 free sample questionsGH-200 study guide
- medium
- hard
What the Exam Actually Looks Like
GH-200 is delivered as about 60 to 65 multiple-choice and multiple-response questions over 100 minutes, at a Pearson VUE testing centre or online proctored, with a passing score of 700 out of 1000 and a fee of USD 99, the cheapest exam fee in Examworthy's catalogue.
The exam was restructured in January 2026 into five functional groups. Author and manage workflows carries the most weight at 25 per cent, followed closely by Manage GitHub Actions for the enterprise at 24 per cent. Consume and troubleshoot workflows and Author and maintain actions each carry 18 per cent, and Secure and optimize automation carries 15 per cent.
What Each Functional Group Actually Covers
Author and manage workflows, the largest group, tests writing and structuring YAML workflow files: triggers, jobs, steps, and the syntax that defines when and how a workflow runs. Manage GitHub Actions for the enterprise, nearly as large, shifts to an organisation-wide lens: policies, self-hosted runners, and governance across many repositories rather than a single workflow.
Consume and troubleshoot workflows tests reading logs, diagnosing failures, and understanding how existing workflows behave, while Author and maintain actions covers building and publishing reusable actions rather than only consuming other people's. Secure and optimize automation, the lightest group, covers secrets management, permissions, and performance, and is often where candidates who focused only on writing workflows lose marks.
Who This Certification Is For
GH-200 fits DevOps engineers, platform engineers, and developers who own CI/CD pipelines built on GitHub Actions specifically, rather than a general automation or DevOps credential. It sits at Microsoft's associate tier, comparable in scope to other associate-level Microsoft certifications rather than a foundational or expert-level exam.
Because the enterprise-management functional group carries nearly a quarter of the exam, GH-200 is not purely a hands-on scripting certification. Candidates who have only authored workflows for their own small projects, without exposure to organisation-wide policy or self-hosted runner management, will need to study that group specifically rather than assuming project-level experience covers it.
How to Prepare Effectively
Weight your study time toward the two largest groups, Author and manage workflows and Manage GitHub Actions for the enterprise, which together make up nearly half the exam. If your day-to-day experience is limited to writing workflows for your own repositories, treat the enterprise-management group as a genuine gap to close rather than an easy extension of what you already know.
Practise with multiple-response questions specifically, since the exam format includes them alongside standard multiple choice, and look for an explanation on every option so you understand why a plausible-looking configuration is still wrong for the scenario given.
An organisation owner wants workflows to run actions authored inside the organisation freely, plus a small curated set of third-party actions from GitHub Marketplace, while blocking everything else. The owner selects the Allow enterprise, and select non-enterprise, actions and reusable workflows policy. Which additional configuration enforces the curated third-party set without permitting unlisted Marketplace actions?
Settings > Actions > General > Actions permissions
Allow <org> actions and reusable workflows: enabled
Allow actions created by GitHub: <state>
Allow specified actions and reusable workflows: <list>Pick an answer, then read why each option is right or wrong.
Show the answer and why every option is right or wrong
Why A is wrong: Tempting because the policy name mentions non-enterprise actions, but the select option grants nothing extra until patterns are entered, so an empty list blocks every third-party action rather than permitting the curated set.
Why B is wrong: Tempting because exclusion feels simpler, but Actions permissions offers no deny list, and Allow all would permit every action, so this both invents a feature and reverses the intended restriction.
Why C is wrong: Tempting because the GitHub toggle sounds inclusive, but it only admits GitHub-authored actions, not arbitrary verified publishers, so it neither names the curated third-party set nor blocks the rest.
Why D is correct: The select policy reads the allow list, and entries written as owner/repo or owner/repo@ref admit only those named actions, leaving every unlisted Marketplace action blocked while organisation-owned ones stay permitted.
Stop guessing whether you are ready.
Practise on an audited bank with an explanation of why every answer is right or wrong. Free to start, no sign-up.
Frequently asked questions
How much does the GitHub Actions (GH-200) exam cost?
USD 99, the lowest exam fee in Examworthy's catalogue, delivered at a Pearson VUE testing centre or online proctored.
How many questions are on the GH-200 exam?
About 60 to 65 multiple-choice and multiple-response questions over 100 minutes, with a passing score of 700 out of 1000.
What are the five functional groups on the GH-200 exam?
Author and manage workflows (25 per cent), Manage GitHub Actions for the enterprise (24 per cent), Consume and troubleshoot workflows (18 per cent), Author and maintain actions (18 per cent), and Secure and optimize automation (15 per cent).
Is GH-200 a good first DevOps certification?
It is a strong choice if GitHub Actions specifically is your CI/CD platform, since it is focused rather than a general automation credential. If you need broader DevOps or multi-platform CI/CD credibility, a wider-scoped certification may serve you better.
When was the GH-200 exam last updated?
January 2026, when Microsoft restructured it into the current five functional groups with the weights described above.
Examworthy is not affiliated with or endorsed by GitHub. This article is original commentary based on public exam blueprints and published sources. We never reproduce live exam items. All certification names and marks belong to their respective owners.