This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Choose the best response for each of the questions.
A team stores its training scripts, pipeline component YAML files, and a trained model binary in the same GitHub repository. Which item is misplaced?
The trained model binary.
The pipeline component YAML files.
The training scripts.
A data scientist directly pushes a change to the main branch that breaks the training script. Which practice would have prevented this?
main
A branch protection rule blocking direct pushes to main, combined with a pull request process.
A scheduled workflow that tests main nightly.
A repository secret that stores Azure credentials for the main branch only.
A team wants linting to run automatically whenever someone opens a pull request, and the merge must be blocked if linting fails. Which two GitHub features work together to enforce this?
A workflow with a pull_request trigger, and a branch protection rule that requires that workflow's status check.
pull_request
A workflow with a push trigger on main, and a required reviewer approval.
push
A scheduled workflow and a GitHub environment with required reviewers.
A team uses a service principal with client secrets stored in GitHub secrets to authenticate their training workflow to Azure. A security review recommends switching to workload identity federation with OIDC. What is the primary security benefit?
Workload identity federation issues short-lived tokens at runtime instead of storing long-lived credentials, so a compromised token has a limited window of validity.
Workload identity federation automatically assigns the service principal the minimum required Azure role.
Workload identity federation stores credentials encrypted in Azure Key Vault instead of GitHub secrets.
Azure Event Grid reports that new training data arrived in storage. The team wants this event to start a GitHub Actions retraining workflow. Why does the design use an intermediary?
GitHub Actions doesn't natively subscribe to Event Grid events, so an intermediary can receive the event, authenticate to GitHub, and send a repository_dispatch call.
repository_dispatch
Event Grid can send events only to services in the same Azure subscription.
A repository_dispatch event requires a pull request to exist before it can be sent.
You must answer all questions before checking your work.
Was this page helpful?
Need help with this topic?
Want to try using Ask Learn to clarify or guide you through this topic?