7. Understand Privacy, Security, and Administration (10-15%)

Everything covered so far — repositories, collaboration, automation, planning — depends on getting access right: who can see what, who can change what, and how an account proves it's really them. This phase covers account security, permission roles, Enterprise-scale identity management, repository visibility, and organization administration.

Think of this phase as the lock on everything the earlier phases built — without the right permission model, even a perfectly organized repository is one misconfiguration away from a leak, which is exactly the risk the exam tests here. ⚠️ Exam Trap: repository visibility (public/private/internal) and branch protection are two separate controls — a private repository with no branch protection can still be broken by anyone who already has access.