Microsoft GH-600 Exam Questions & Answers – Get Free PDF Questions

Correct : B

The agent session log is the appropriate starting point when the reported problem concerns an agent's interaction, execution sequence, or tool activity within the development environment. It provides information closer to the failing behavior than repository-level workflow usage statistics.

A useful investigation establishes what the agent was asked to do, which operations it attempted, what responses those operations returned, and where progress stopped or diverged from the intended result. Session diagnostics can help distinguish an instruction problem from an unavailable tool, a rejected operation, or an execution error. VS Code also provides detailed chat debugging facilities for inspecting interactions and diagnosing failures.

GitHub Actions usage metrics primarily describe workflow consumption. Runner logs are relevant when evidence points to a hosted workflow or runner problem. The token permissions block becomes relevant when the failure concerns authorization to a GitHub resource. None should be assumed to be the root cause before examining the reported execution.

The PDF selects B; the underlying Dev1 incident description is not included, so this selection assumes a session-level agent issue.

Study-guide topics: diagnostic evidence, tool-call inspection, and failure localization. Reference: VS Code---Debug chat interactions.

Correct : C

A fine-grained PAT restricted to product-api provides an enforceable repository-level authorization boundary for agent1. GitHub fine-grained personal access tokens can be limited to selected repositories and assigned only the repository permissions required by the workload. Consequently, even if agent1 attempts to access billing-service or infra-terraform, the credential does not authorize access to those repositories. GitHub specifically recommends fine-grained PATs when repository access must be restricted to particular repositories.

This directly aligns with the GH-600 objective to configure an agent's scope to a specific repository and define execution boundaries through repository context and permissions. Microsoft Learn defines execution context as including the repository an agent can access and emphasizes that repository scope is the first boundary limiting agent behavior.

Option A provides behavioral guidance but is not a security authorization boundary. Option B controls the permissions available to the workflow token but does not, by itself, establish the required cross-repository credential restriction. Option D only prevents certain push operations; it does not stop agent1 from reading or otherwise accessing the other repositories.

Study Guide Reference Topics: Implement Tool Use and Environment Interaction execution context and boundaries; repository-specific agent scope; tool permissions; least-privilege authentication.

Correct : A

The correct answer is A because tool availability must be constrained at the agent/MCP integration boundary. GitHub custom-agent configuration provides a tools property that explicitly determines which tools the agent is permitted to use, including tools supplied by configured MCP servers. Rather than enabling all tools with ['*'] or omitting the restriction, administrators can specify individual tool names or aliases and thereby implement an explicit allow-list.

This is a fundamental least-privilege control for agentic systems. An MCP server can expose numerous capabilities, but exposure by the server does not mean every capability should automatically be available to every agent. Restricting the agent to the tools required for its assigned role reduces unintended actions and limits the blast radius of erroneous reasoning, prompt injection, or excessive autonomy. GitHub also supports repository MCP configuration through which administrators determine which external MCP integrations are available.

.copilotignore does not implement MCP authorization. Repository rulesets govern GitHub repository operations such as branches and merges, while /usage reports runtime/session information.

Study Guide Reference Topics: Implement Tool Use and Environment Interaction; MCP integration; tool allow-listing; least privilege; execution boundaries.

===============

Correct : D

The /compact command reduces the active conversation context while preserving a condensed summary of the important work completed so far. It is designed for long-running agent sessions that approach the context-window limit.

/clear would remove the session context rather than preserve the useful implementation history. This creates a sharper loss of continuity and does not meet the requirement to retain prior progress. /yolo concerns approval behavior, not context reduction. /context is used to inspect or manage context information but does not perform the required compaction.

Compaction is most effective when durable project state already exists in repository artifacts: source changes, commits, task files, plans, and test outputs. The summarized context can then retain decisions and current goals while the repository continues to hold the detailed implementation record.

Study-guide topics: context compaction, long-running sessions, durable state, and execution continuity.

===============

Correct : D

The job must evaluate the event that triggered the workflow. The expression github.event_name == 'pull_request' directly tests that condition, ensuring the agent job is skipped for push-triggered runs. GitHub's contexts documentation provides this exact job-level filtering pattern. Configuration variables remain accessible through vars, allowing the workflow to use name: ${{ vars.JOB_NAME }} and runs-on: ${{ vars.RUNNER }} without hard-coding either value.

Option A checks a branch reference rather than the triggering event. A push to the main branch could therefore satisfy the condition, which violates the requirement. Option B incorrectly substitutes the environment context for the organization's configuration-variable context. GitHub also distinguishes default environment variables from properties available through expression contexts. Option C explicitly selects push events and therefore preserves the unwanted behavior.

This configuration establishes the correct execution boundary before the autonomous job starts. It connects the agent's activity to the intended pull request event while retaining centrally managed configuration. The relevant curriculum topics are evaluating execution context and configuring agents to run within CI workflows.

===============