Home / artificial-intelligence-machine-learning / GitHub Copilot (GH-300) / Cheat Sheet
GitHub Copilot (GH-300)

GH-300 Cheat Sheet

GH-300 Tests Which Copilot Feature, Setting or Safeguard Fits — Not Prompt Tricks

For developers and administrators using GitHub Copilot daily. Features are the largest domain, so separating agent mode, coding agent, instructions files, exclusions and policies matters more than clever prompting.

Check Your Readiness →
Among the harder certs
Avg: Not published by GitHub or Microsoft
Pass: 750 / 1000
Most candidates understand GitHub Copilot (GH-300) concepts — and still fail. This exam tests how you apply knowledge under pressure.

GH-300 Domain Map (skills measured as of August 7, 2026)

Six domains; the official at-a-glance list repeats the features bullet, treated here as a duplicate. Questions describe a developer or admin goal and ask for the feature, setting or pipeline stage that achieves it. 100 minutes; question count not published, about 60 commonly reported.

  1. 01
    Use GitHub Copilot responsibly (15–20%) — responsible AI principles, hallucination, bias, human review and accountability
  2. 02
    Use GitHub Copilot features (25–30%) — IDE modes, coding agent, CLI, instructions and prompt files, MCP, policies
  3. 03
    Copilot data and architecture (10–15%) — context gathering, proxy filtering, post-processing, context window limits
  4. 04
    Prompt engineering and context crafting (10–15%) — prompt structure, zero- and few-shot, chat references and history
  5. 05
    Developer productivity (10–15%) — slash commands, test generation, refactoring, modernisation, synthetic data
  6. 06
    Privacy, content exclusions and safeguards (10–15%) — exclusion scope and gaps, public code filter, troubleshooting

Wrong instinct vs correct approach

An administrator wants to see what a developer asked Copilot last week
✕ Wrong instinct

Search the organization audit log for the prompt

✓ Correct approach

Audit log events cover administrative actions such as seat assignments and policy changes, not prompt or suggestion content. Seat changes at scale use the Copilot user management REST API, for individual users or whole teams.

A team on Copilot Business worries its prompts will train public models
✕ Wrong instinct

Disable Copilot because every plan feeds model training

✓ Correct approach

GitHub states Copilot Business and Enterprise data is not used to train its models. Retention differs by surface, such as IDE completions versus Chat, so check the GitHub Copilot Trust Center rather than assuming one figure.

Chat answers keep repeating a requirement from an earlier, unrelated task in the same thread
✕ Wrong instinct

Add a line telling Copilot to be accurate

✓ Correct approach

Chat history is sent with each new request, so stale turns skew answers. Start a new thread when switching topics, then reference the exact context with #file or #selection instead of letting Chat guess.

A developer must show Copilot an exact output format for a data transformation
✕ Wrong instinct

Write the longest, most detailed description possible

✓ Correct approach

Use few-shot prompting: put sample inputs and their expected outputs in the prompt itself. State the general goal first, add specific constraints, and split multi-part work into smaller requests that are easier to review.

Suggestions stopped for one user, and only in Python files
✕ Wrong instinct

Reinstall the IDE and the Copilot extension

✓ Correct approach

Check the cheap causes first: sign-in and seat, the per-language enable setting, a content exclusion on those files, firewall or proxy access to GitHub endpoints, then the extension logs for auth or connection errors.

Know these cold

  • ▸ The developer stays accountable for accepted code; GitHub claims no ownership of suggestions
  • ▸ Completion context is code near the cursor plus open tabs; close unrelated files
  • ▸ The Copilot proxy filters input before the model; post-processing checks output afterwards
  • ▸ Copilot Spaces ground answers in curated context; Codespaces are cloud development environments
  • ▸ Sub-agents work in their own context window and hand back only a result
  • ▸ MCP connects agents to tools and data sources; it is a protocol, not a model
  • ▸ Enterprise Copilot policy can override the organization's choice; developers cannot change it in the IDE
  • ▸ Zero-shot gives instructions only; few-shot adds input and output examples to the prompt
  • ▸ /tests, /explain, /fix and /doc speed work, but verify every result with tests and review
  • ▸ Output is non-deterministic — dentical code can produce different suggestions on each request

Can you answer these without checking your notes?

In this scenario: "An administrator wants to see what a developer asked Copilot last week" — what should you do first?
Audit log events cover administrative actions such as seat assignments and policy changes, not prompt or suggestion content. Seat changes at scale use the Copilot user management REST API, for individual users or whole teams.
In this scenario: "A team on Copilot Business worries its prompts will train public models" — what should you do first?
GitHub states Copilot Business and Enterprise data is not used to train its models. Retention differs by surface, such as IDE completions versus Chat, so check the GitHub Copilot Trust Center rather than assuming one figure.
In this scenario: "Chat answers keep repeating a requirement from an earlier, unrelated task in the same thread" — what should you do first?
Chat history is sent with each new request, so stale turns skew answers. Start a new thread when switching topics, then reference the exact context with #file or #selection instead of letting Chat guess.

Common Exam Mistakes — What candidates get wrong

Treating IDE agent mode and the Copilot coding agent as one feature

Agent mode runs in your editor session, edits multiple files and asks before running terminal commands. The coding agent is assigned an issue on GitHub, works in the background in a GitHub Actions powered environment and opens a pull request.

Putting team review standards in a prompt file

Prompt files (.prompt.md) run only when invoked by name. Rules that must apply to every request belong in .github/copilot-instructions.md, or in path-specific .instructions.md files for matching paths. Copilot code review also follows those instructions files.

Relying on content exclusions to protect files from agent mode

GitHub documents that IDE edit and agent modes, symlinks and remote filesystems are not covered. Exclusions need Copilot Business or Enterprise, can be set at repository, organization or enterprise level, and take time to propagate; reloading the editor fetches them.

Placing public code matching before the model runs

Input filtering screens prompts on GitHub's Copilot proxy before generation. Public code matching, toxicity and vulnerability checks happen in post-processing on the generated output. When matches are allowed, code references show the source repository and license.

Accepting generated tests because every one passes first time

Tests that assert whatever the code currently returns encode existing bugs. Derive expected values from requirements, ask Copilot to list edge cases, and use integration tests where mocks would hide service interaction. Request synthetic data, never production records.

Resources to help you pass GitHub Copilot GH-300 on your first attempt

See whether you can pick the right Copilot mode, file and safeguard under GH-300 conditions.