DRAG DROP You have a GitHub organization. You ate creating a GitHub Actions workflow. You need to perform authenticated AP1 requests by using a GitHub app name App1. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. 
I remember a similar scenario from labs on a practice test, sequence is: Register App1 and store app ID, generate private key as secret, install App1 in org, then generate installation access token. That hits each setup stage for GitHub Apps with Actions. I think that's right here but let me know if anyone saw it different on their exam!
Same order as most GitHub Apps setups: Register App1 and save the app ID, generate the private key and store as a secret, install App1 to your org, then generate the installation access token. That lines up with what I've done in practice, but if JWT was in the list, might need to adjust. Does this make sense?