GH-900 — GitHub Foundations (GH-900) Exam Study Plan
A practical time-based study plan for the GitHub Foundations (GH-900) exam, with 7-day, 14-day, 30-day, and 60/90-day schedules.
Who this Study Plan is for
This independent Study Plan is for candidates preparing for the GitHub Foundations (GH-900) exam from GitHub. It is designed for practical exam preparation: diagnosing gaps, reviewing GitHub concepts, doing hands-on Git and GitHub tasks, practicing questions, and building timed-exam confidence.
The GH-900 exam is foundation-level, so your preparation should focus on clear understanding rather than memorizing obscure commands. You should be able to explain what GitHub features do, when to use them, and how common collaboration workflows fit together.
Which plan should you use?
| Time available | Best for | Main strategy | Risk level |
|---|---|---|---|
| 7 days | You have used GitHub before and need final review | Diagnostic, weak-area sprint, timed mocks, final polish | High if Git/GitHub basics are weak |
| 14 days | You know basic Git but have gaps in GitHub features | Focused objective review plus daily hands-on tasks | Moderate |
| 30 days | You want balanced preparation while working full time | Learn, practice, review, mock, repeat | Best default plan |
| 60/90 days | You are new to Git, GitHub, or professional collaboration workflows | Build fundamentals slowly, then shift into exam practice | Lowest risk |
Use the shortest plan only if you can already explain these without notes:
- Repository, commit, branch, merge, clone, fork, pull request, issue
- Difference between Git and GitHub
- How collaboration works through branches, reviews, and pull requests
- Basic GitHub Actions terminology
- Basic security and access-control features in GitHub
- Common GitHub productivity features such as Projects, Discussions, Markdown, releases, and notifications
GH-900 study buckets
Use these as practical study buckets. They are not presented as official exam weights.
| Study bucket | What to know | Hands-on proof task |
|---|---|---|
| Git and version control fundamentals | Commits, branches, remotes, merge conflicts, tags, staging, history | Create a local repo, branch, commit, merge, and push |
| GitHub repository basics | README, license, .gitignore, repository visibility, settings, releases | Create a repo with README, issue template, and release notes |
| Collaboration workflows | Issues, labels, milestones, pull requests, reviews, forks, discussions | Open an issue, create a branch, submit a PR, review and merge |
| Project management | GitHub Projects, boards/tables, assignees, milestones, notifications | Track three issues through a simple project workflow |
| GitHub Actions basics | Workflows, jobs, steps, runners, events, Marketplace actions | Add a simple workflow that runs on push or pull request |
| Security and governance basics | Permissions, roles, branch protection/rulesets, Dependabot, secret scanning, code scanning concepts | Identify which feature helps with each common security scenario |
| GitHub product awareness | GitHub Desktop, Codespaces, Copilot, Pages, mobile, CLI, Enterprise concepts | Match product or feature to a user need |
| Exam readiness | Read question wording, eliminate distractors, manage time | Complete timed mixed sets and review misses carefully |
Daily practice rhythm
Use this rhythm on most study days. Adjust duration based on your available time.
| Block | 30-minute day | 60-minute day | 90-minute day |
|---|---|---|---|
| Recall warm-up | 3 min | 5 min | 10 min |
| Objective review | 10 min | 20 min | 25 min |
| Hands-on task or scenario | 10 min | 20 min | 30 min |
| Practice questions | 5 min | 10 min | 20 min |
| Missed-question log | 2 min | 5 min | 5 min |
What each block should include
Recall warm-up
- Write 3 to 5 terms from memory.
- Example: “fork, clone, branch, pull request, merge.”
- Define each in one sentence.
Objective review
- Study one narrow topic, not a whole product area.
- Example: “pull request review states” or “workflow jobs and steps.”
Hands-on task
- Do the thing in GitHub or Git where possible.
- If you cannot do it hands-on, draw the workflow.
Practice questions
- Use mixed practice only after you have covered the topic once.
- Early in the plan, use topic-specific questions.
Missed-question log
- Do not just record the correct answer.
- Record why your original reasoning failed.
Diagnostic-first setup
Before starting any plan longer than 7 days, take a short diagnostic practice set.
| Step | Action | Output |
|---|---|---|
| 1 | Take 25 to 40 mixed questions without notes | Baseline score and weak topics |
| 2 | Mark every uncertain question, even if correct | Confidence gap list |
| 3 | Sort misses by topic | Top 3 weak buckets |
| 4 | Pick your plan | 14, 30, or 60/90 days |
| 5 | Schedule mock dates | Avoid waiting until the final two days |
For a 7-day plan, take the diagnostic on Day 1 and immediately turn the results into a review list.
7-day final review plan
Use this if your exam is in one week and you already have working familiarity with GitHub. This is not ideal for learning GitHub from zero.
| Day | Focus | Study actions | Practice target |
|---|---|---|---|
| 1 | Diagnostic and triage | Take a timed mixed set. Build a weak-area list. Review Git vs GitHub, repositories, commits, branches, and pull requests. | 40 to 60 questions |
| 2 | Git and repository workflows | Practice clone, branch, commit, push, pull, merge, and conflict concepts. Review README, license, .gitignore, releases, and repository settings. | Topic set on Git/repositories |
| 3 | Collaboration | Review issues, labels, milestones, Projects, Discussions, forks, PR reviews, reviewers, assignees, and notifications. Do one complete issue-to-PR workflow. | Topic set on collaboration |
| 4 | Actions and automation | Review workflows, events, jobs, steps, runners, actions, secrets conceptually, and Marketplace actions. Read a simple workflow file. | Topic set on Actions |
| 5 | Security, access, and governance | Review permissions, organization/team concepts, branch protection or rulesets, Dependabot, secret scanning, code scanning, and security advisories at a high level. | Topic set on security/admin |
| 6 | Timed mock and deep review | Take a full timed mock or the longest timed set available. Review every missed and guessed question. Do not add broad new material afterward. | Full mock or timed mixed set |
| 7 | Final polish | Review missed-question log, definitions, workflows, and high-yield comparisons. Stop heavy studying early. Confirm exam logistics. | Light mixed review only |
7-day rule
After Day 5, stop trying to “cover everything.” Your score will improve more from correcting repeated mistakes than from rushing through new topics.
14-day focused plan
Use this if you have two weeks and can study most days. This plan assumes you know basic computer concepts but may not use GitHub daily.
| Day | Focus | Main tasks |
|---|---|---|
| 1 | Diagnostic | Take a mixed diagnostic. Build your missed-question log. Identify top weak buckets. |
| 2 | Git fundamentals | Study version control, local vs remote, commit history, staging, branches, merge, fetch, pull, push. |
| 3 | Repository essentials | Review repository creation, visibility, README, license, .gitignore, releases, tags, wikis, Pages at a basic level. |
| 4 | Branching and PR workflow | Practice creating a branch, opening a pull request, adding commits, reviewing, approving, merging, and closing. |
| 5 | Issues and planning | Study issues, labels, milestones, assignees, templates, Projects, Discussions, notifications. |
| 6 | Practice and repair | Topic practice on Days 2 to 5. Rework all misses. Make flashcards for terms you confuse. |
| 7 | Timed mixed set | Take a timed mixed set. Review by topic, not just by question. |
| 8 | GitHub Actions basics | Study events, workflows, jobs, steps, runners, actions, logs, status checks, and Marketplace actions. |
| 9 | Security basics | Review permissions, teams, least privilege, branch protection/rulesets, Dependabot, secret scanning, code scanning concepts. |
| 10 | GitHub products and usage | Review GitHub Desktop, CLI, Codespaces, Copilot, Pages, mobile, Enterprise concepts, and when each is useful. |
| 11 | Scenario practice | Practice “which feature should you use?” questions. Compare similar features. |
| 12 | Full timed mock | Take a full mock or longest available timed exam. Review deeply. |
| 13 | Weak-area sprint | Study only topics from the missed-question log. Redo selected hands-on tasks. |
| 14 | Final review | Light review, definitions, workflow diagrams, exam logistics, rest. |
14-day priorities
If time gets tight, protect these activities:
- Diagnostic practice
- Pull request and issue workflow practice
- GitHub Actions terminology review
- Security and permissions review
- Timed mock plus missed-question review
30-day balanced plan
Use this as the default plan if you are preparing while working or studying part time. Aim for 5 study days per week, with 45 to 90 minutes per session.
Week 1: Git, GitHub, and repository foundations
| Day | Focus | Actions |
|---|---|---|
| 1 | Diagnostic | Take a mixed diagnostic. Create your study tracker. |
| 2 | Git concepts | Study working directory, staging area, commits, history, branches, merges. |
| 3 | Local-to-remote workflow | Practice clone, add, commit, push, pull, fetch, remote tracking. |
| 4 | Repository setup | Create a repo with README, license, .gitignore, topics, and basic settings. |
| 5 | Markdown and documentation | Practice headings, lists, links, tables, code blocks, task lists, and README structure. |
| 6 | Review | Topic practice on Git/repositories. Update missed-question log. |
| 7 | Rest or light recall | Review flashcards only. |
Hands-on command practice:
git clone <repository-url>
cd <repository-name>
git checkout -b feature/readme-update
git status
git add README.md
git commit -m "Update README"
git push -u origin feature/readme-update
Know what each command does. The exam is foundation-level, so focus on concept and workflow, not memorizing every option.
Week 2: Collaboration and project workflows
| Day | Focus | Actions |
|---|---|---|
| 8 | Issues | Create issues, assign users, add labels, use milestones, link issues to work. |
| 9 | Pull requests | Open a PR, request review, comment, resolve feedback, merge. |
| 10 | Forks and contribution workflow | Compare fork vs branch workflows. Understand external contribution flow. |
| 11 | Reviews and branch rules | Review approvals, status checks conceptually, protected branches/rulesets at a basic level. |
| 12 | Projects and planning | Build a small GitHub Project and move issues through statuses. |
| 13 | Timed topic set | Practice collaboration questions under time pressure. |
| 14 | Review | Repair weak areas and write workflow summaries from memory. |
Week 3: Actions, security, and GitHub features
| Day | Focus | Actions |
|---|---|---|
| 15 | GitHub Actions overview | Study workflow files, triggers/events, jobs, steps, runners, logs. |
| 16 | Actions hands-on | Add a simple workflow and read the run output. |
| 17 | Marketplace and automation scenarios | Identify when to use reusable actions, workflow automation, or manual steps. |
| 18 | Security basics | Review Dependabot, secret scanning, code scanning, security advisories, permissions, and least privilege. |
| 19 | Accounts, organizations, and teams | Study personal accounts, organizations, teams, roles, access management concepts. |
| 20 | GitHub product awareness | Review Desktop, CLI, Codespaces, Copilot, Pages, mobile, and enterprise-oriented features. |
| 21 | Timed mixed set | Take a timed mixed set and review all missed and guessed questions. |
Simple GitHub Actions practice:
name: foundation-ci
on:
- push
- pull_request
jobs:
check:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- run: echo "GH-900 workflow practice"
Be able to identify:
- Workflow name
- Trigger event
- Job
- Runner
- Step
- Action being used
- Command being run
Week 4: Exam practice and weak-area repair
| Day | Focus | Actions |
|---|---|---|
| 22 | Mock exam 1 | Take a full timed mock or longest available timed set. |
| 23 | Mock review | Categorize every miss. Re-study top two weak topics. |
| 24 | Scenario drills | Practice “best feature for this situation” questions. |
| 25 | Hands-on repair | Redo weak workflows: PRs, Projects, Actions, or permissions. |
| 26 | Mock exam 2 | Take another timed mixed set. Compare weak areas to Day 22. |
| 27 | Final content review | Review terms, feature comparisons, and common distractors. |
| 28 | Weak-area sprint | Study only the remaining weak topics. |
| 29 | Final light mock | Short timed set. Do not overreact to one bad question. |
| 30 | Exam readiness | Light recall, logistics, rest. No heavy new content. |
60/90-day full preparation path
Use this if you are new to Git, new to GitHub, or want a low-stress schedule. The 60-day version compresses the first two phases. The 90-day version gives more time for hands-on repetition.
| Phase | 60-day timing | 90-day timing | Goal |
|---|---|---|---|
| Phase 1: Foundations | Days 1-14 | Days 1-21 | Learn Git and GitHub basics slowly |
| Phase 2: Collaboration | Days 15-28 | Days 22-42 | Build fluency with issues, PRs, reviews, and Projects |
| Phase 3: Platform features | Days 29-42 | Days 43-63 | Study Actions, security, access, and GitHub products |
| Phase 4: Exam practice | Days 43-56 | Days 64-84 | Timed sets, mocks, missed-question repair |
| Phase 5: Final review | Days 57-60 | Days 85-90 | Light review, readiness checks, exam logistics |
Phase 1: Foundations
| Objective | Study actions |
|---|---|
| Understand Git vs GitHub | Explain Git as version control and GitHub as a collaboration platform. |
| Use core Git workflow | Practice clone, status, add, commit, branch, push, pull, merge. |
| Understand repository structure | Review README, license, .gitignore, branches, tags, releases. |
| Read commit history | Use the GitHub UI and basic Git commands to inspect changes. |
| Build vocabulary | Define repository, commit, branch, remote, origin, fork, clone, pull request. |
End-of-phase check:
- Can you explain what happens between making a local commit and opening a pull request?
- Can you identify whether a task belongs in Git, GitHub, or both?
- Can you describe why branches are useful?
Phase 2: Collaboration
| Objective | Study actions |
|---|---|
| Issues | Create issues with labels, assignees, milestones, and linked PRs. |
| Pull requests | Open, review, comment, approve, request changes, and merge. |
| Forks | Compare fork-based contribution with branch-based contribution. |
| Projects | Track work using a small project view. |
| Discussions and notifications | Know when discussion, issue, PR, or notification settings are appropriate. |
End-of-phase check:
- Can you choose between an issue, pull request, discussion, and project item?
- Can you explain the normal flow from reported bug to merged fix?
- Can you identify what reviewers, assignees, labels, and milestones do?
Phase 3: Platform features, automation, and security
| Objective | Study actions |
|---|---|
| GitHub Actions | Learn workflows, events, jobs, steps, runners, actions, logs, and status checks. |
| Security features | Review Dependabot, secret scanning, code scanning, security advisories, and dependency awareness. |
| Access control | Study personal accounts, organizations, teams, roles, repository permissions, and least privilege. |
| Governance basics | Understand branch protection/rulesets and review requirements conceptually. |
| Product awareness | Review GitHub Desktop, CLI, Codespaces, Copilot, Pages, mobile, and Enterprise concepts. |
End-of-phase check:
- Can you read a simple workflow YAML file and identify its parts?
- Can you match a security feature to a common risk?
- Can you explain why least privilege matters in repositories and organizations?
Phase 4: Exam practice
| Week activity | Actions |
|---|---|
| First mock | Take a timed mock or long timed mixed set. Identify weak buckets. |
| Topic repair | Spend two sessions per weak bucket: one review session, one practice session. |
| Scenario drills | Practice feature-selection questions and workflow-order questions. |
| Second mock | Take another timed set and compare results. |
| Confidence review | Revisit questions you guessed correctly. These are hidden risks. |
Phase 5: Final review
| Day type | Actions |
|---|---|
| 3 to 5 days out | Final weak-area sprint. Review missed-question log. |
| 2 days out | Light timed set only. Stop adding broad new material. |
| 1 day out | Definitions, workflows, exam logistics, rest. |
| Exam day | Warm up lightly. Do not cram unfamiliar features. |
Missed-question review method
A missed-question log is more useful than taking endless new questions. Use a table like this.
| Field | What to record | Example |
|---|---|---|
| Topic | The study bucket | GitHub Actions |
| Question type | Definition, scenario, workflow order, feature comparison | Scenario |
| Your mistake | Why you chose the wrong answer | Confused job with step |
| Correct rule | The rule you should remember | A job contains steps; a workflow contains jobs |
| Source of truth | Where to review | GitHub documentation, notes, hands-on workflow |
| Follow-up action | What you will do next | Read a workflow file and label each part |
| Recheck date | When to retry | In 2 days |
Root-cause tags
Tag each miss with one primary cause:
| Tag | Meaning | Fix |
|---|---|---|
| Term confusion | You mixed up vocabulary | Create a comparison card |
| Workflow order | You knew the pieces but not the sequence | Draw the process |
| Feature selection | You chose a similar but wrong GitHub feature | Make a “when to use” table |
| Hands-on gap | You have read about it but never used it | Do a small lab |
| Question reading | You missed a keyword | Slow down and underline constraints |
| Guessing | You were uncertain | Review the topic before taking more questions |
Recheck schedule
For each missed or guessed question:
- Review it the same day.
- Re-answer it 48 hours later without notes.
- Re-answer a similar question within one week.
- If missed again, do a hands-on task or draw the workflow.
Timed mock exam strategy
Do not save all timed practice for the end. Timed practice teaches pacing, question interpretation, and endurance.
| Preparation length | First timed set | Full mock or longest timed set | Final timed practice |
|---|---|---|---|
| 7 days | Day 1 | Day 6 | Day 7 light set only |
| 14 days | Day 7 | Day 12 | Day 13 short weak-area set |
| 30 days | Day 21 | Day 22 and Day 26 | Day 29 light set |
| 60/90 days | End of Phase 3 | During Phase 4 | Final week light set |
How to review a timed mock
Spend at least as much time reviewing the mock as taking it.
| Review step | What to do |
|---|---|
| Score by topic | Identify which buckets caused the most misses. |
| Review guessed correct answers | Treat guesses as weak areas. |
| Rephrase each miss | Write the concept in your own words. |
| Identify distractors | Note why the wrong option sounded plausible. |
| Create a repair task | Assign each weak topic a review or hands-on action. |
High-yield comparison tables
Git and GitHub workflow terms
| Term | Practical meaning |
|---|---|
| Git | Distributed version control system |
| GitHub | Platform for hosting, collaboration, automation, and project workflows |
| Repository | Project storage location with files and history |
| Commit | Snapshot of changes with metadata |
| Branch | Independent line of development |
| Merge | Combining changes from one branch into another |
| Clone | Local copy of a remote repository |
| Fork | Personal copy of another repository, often for contribution |
| Pull request | Proposed change with review and discussion |
| Remote | Repository location outside your local working copy |
Collaboration feature selection
| If the scenario asks for… | Think of… |
|---|---|
| Reporting a bug or task | Issue |
| Proposing code changes | Pull request |
| Reviewing changes before merge | Pull request review |
| Organizing work items | GitHub Projects |
| Grouping issues by target or phase | Milestones |
| Categorizing issues or PRs | Labels |
| Open-ended community conversation | Discussions |
| External contribution to a repo | Fork and pull request |
| Tracking repository updates | Notifications and watching |
Automation and security feature selection
| If the scenario asks for… | Think of… |
|---|---|
| Running checks on push or pull request | GitHub Actions workflow |
| A unit of automation inside a workflow | Job or step |
| Reusing automation from others | Marketplace action |
| Detecting vulnerable dependencies | Dependabot-related features |
| Finding committed secrets | Secret scanning |
| Finding code security issues | Code scanning |
| Restricting direct changes to important branches | Branch protection or rulesets |
| Limiting access to what users need | Permissions and least privilege |
| Managing groups of users | Organizations and teams |
Final-week rules
Follow these rules during the last week, especially if you are taking the 7-day or 14-day path.
| Rule | Why it matters |
|---|---|
| Stop broad new material 2 to 3 days before the exam | New material can create confusion without enough practice time |
| Review missed and guessed questions daily | These are the highest-return study items |
| Practice feature-selection scenarios | GH-900 questions often test knowing which GitHub feature fits a need |
| Keep hands-on tasks small | Do not start large projects in the final week |
| Use timed practice, but not all day | Fatigue can lower accuracy and confidence |
| Confirm exam logistics | Avoid preventable appointment, ID, or system-check issues |
| Sleep before the exam | Recall and careful reading matter |
Exam-readiness checks
You are likely ready when you can do most of the following without notes:
| Readiness area | Check |
|---|---|
| Git basics | Explain clone, commit, branch, merge, push, pull, and remote |
| GitHub basics | Explain repository, issue, pull request, fork, review, release, and README |
| Collaboration | Describe an issue-to-branch-to-PR-to-review-to-merge workflow |
| Project management | Choose between issues, labels, milestones, Projects, and Discussions |
| Actions | Identify workflow, event, job, runner, step, and action in a simple YAML file |
| Security | Match common risks to Dependabot, secret scanning, code scanning, permissions, or branch rules |
| Product awareness | Choose when to use Desktop, CLI, Codespaces, Copilot, Pages, or mobile |
| Timed practice | Complete timed mixed sets without rushing or running out of time |
| Missed-question repair | Explain why your previous wrong answers were wrong |
As a practical target, aim for consistent strong performance on independent timed practice before exam day. Do not treat any practice score as an official passing standard.
Practical next step
Pick the shortest plan that honestly fits your current readiness, then start with a diagnostic practice set. Use the results to choose your first weak-area sprint, and combine daily GH-900 practice questions with small hands-on GitHub tasks until your missed-question log stops repeating the same topics.