Browse Certification Practice Tests by Exam Family

GitHub GH-900 Cheat Sheet: Foundations

Review GitHub Foundations (GH-900) Git basics, repositories, branches, pull requests, issues, projects, security, and collaboration traps before practicing in IT Mastery.

GH-900 is a foundations exam, so most questions test whether you recognize the GitHub object, workflow step, or permission boundary. Use this cheat sheet to review the core vocabulary before a free diagnostic or timed practice.

Use this with practice. Review the GitHub workflow basics, then take the free GH-900 diagnostic or open the full Foundations route in IT Mastery.

Try GH-900 on Web Free GH-900 diagnostic

Exam snapshot

FieldDetail
VendorGitHub
Credential nameGitHub Foundations
Exam codeGH-900
Level shown by Microsoft LearnBeginner
Exam time shown by Microsoft Learn100 minutes
IT Mastery statusLive GH-900 practice available

Topic map

AreaWhat to knowCommon trap
Git and GitHub basicsRepositories, commits, branches, remotes, clone, push, pull, and mergeConfusing local Git actions with GitHub collaboration features
RepositoriesFiles, README, issues, pull requests, discussions, releases, visibility, and settingsTreating a repository as only a file folder
CollaborationForks, branches, reviews, comments, checks, merge readiness, and contribution flowOpening direct changes when a pull request is expected
Modern developmentProjects, GitHub Pages, packages, Codespaces awareness, and community workflowsChoosing a tool because it sounds related, not because it fits the workflow
Security and administration2FA, roles, repository visibility, branch protection, organizations, and permissionsGiving admin access for work that only needs write or maintain access

Must-know distinctions

DistinctionHow to decide
Git vs GitHubGit is version control; GitHub hosts repositories and collaboration workflows.
Commit vs pull requestA commit records changes; a pull request proposes changes for review and merge.
Branch vs forkA branch is a line of work in a repository; a fork is a copy under another account or organization.
Issue vs pull requestIssues track discussion or work; pull requests contain proposed code changes.
Discussion vs issueDiscussions support open-ended conversation; issues track actionable work or bugs.
Release vs tagA tag marks a version in Git; a GitHub release adds release notes and assets around a tag.
Read vs write vs adminRead can view, write can contribute, admin can manage repository settings and high-risk controls.
Public vs private vs internalPublic is visible to everyone; private is restricted; internal is visible within an enterprise context.

High-yield checklist

  • Identify the GitHub object first: repository, branch, commit, issue, pull request, project, release, or organization.
  • Use branches to isolate work before review.
  • Use pull requests for review, discussion, checks, and controlled merging.
  • Use issues for bugs, tasks, and planning conversations that do not yet include code changes.
  • Use forks when contributors do not have direct write access or need an independent copy.
  • Use repository visibility to control who can discover and access a project.
  • Use branch protection or rulesets to require reviews and checks before merge.
  • Use projects to plan, track, and organize work across issues and pull requests.
  • Use 2FA and least privilege for account and repository security.
  • Read the status of checks and reviews before deciding whether a pull request is mergeable.

Common traps

  • Saying a pull request is ready while checks fail or changes are requested.
  • Using admin access when write access is enough.
  • Confusing a fork with a branch.
  • Treating discussions as the same as pull requests.
  • Assuming a private repository is visible to everyone in an organization.
  • Forgetting that GitHub workflow questions usually ask for the next collaboration step.

Practice strategy

Take the free GH-900 diagnostic and tag each miss by object type: Git, repository, issue, pull request, project, security, or community. Then drill the matching topic page before returning to mixed practice.

Because GH-900 is a foundations route, avoid memorizing interface labels without context. The right answer usually follows from the workflow: branch, commit, push, open pull request, review, fix checks, merge, and release.

Official source

Revised on Monday, May 25, 2026