A team has included the SAST template in their pipeline. The SAST job fails because the analyzer cannot detect the project's language. What is the most likely reason?

The project does not have a GitLab Runner with Docker executor.

The SAST job is not allowed to fail.

The project uses a language that is not supported by GitLab's SAST analyzers.

The SAST job is not defined in the .gitlab-ci.yml file.

A team wants to run container scanning only on the main branch, not on feature branches, to save CI minutes. How should they configure this?

Use the `rules` keyword in the container scanning job to restrict it to the main branch.

Use the `only` keyword with the `branches` keyword.

Remove the container scanning job from the .gitlab-ci.yml file.

Set the `allow_failure` option to true.

A team wants to run both SAST and DAST in their pipeline. They have included the SAST template. What additional step is required to also run DAST?

Enable DAST in the project's Security & Compliance settings.

Include the DAST template and configure the `DAST_WEBSITE` variable with the target URL.

Run DAST locally and upload the results manually.

Add a custom job that runs `dast-scanner` on the application.

GitLabCertified Fundamentals Associate

Domain 5Objective 1

Set up Basic Security Scanning GITLAB-CERTIFIED-GIT-ASSOCIATE Practice Questions (Page 3)

Part of the Security Scanning Basics domain, which makes up ~13% of our current practice bank.

27questions here

6free pages

5concepts

Questions 11–15

11foundation · easy
Which GitLab CI/CD keyword is used to incorporate a security scanning template into the pipeline configuration?
Select an answer first
12foundation · easy
A security analyst has reviewed a vulnerability and determined that it does not apply to their project. What action can they take in GitLab to indicate this?
Select an answer first
13application · medium
A team has included the SAST template in their pipeline. The SAST job fails because the analyzer cannot detect the project's language. What is the most likely reason?
Select an answer first
14application · medium
A team wants to run container scanning only on the main branch, not on feature branches, to save CI minutes. How should they configure this?
Select an answer first
15application · medium
A team wants to run both SAST and DAST in their pipeline. They have included the SAST template. What additional step is required to also run DAST?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GITLAB-CERTIFIED-GIT-ASSOCIATE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitLab. “GITLAB-CERTIFIED-GIT-ASSOCIATE” is a trademark of its owner, used for identification only.

Set up Basic Security Scanning GITLAB-CERTIFIED-GIT-ASSOCIATE Practice Questions (Page 3)

Questions 11–15

Which GitLab CI/CD keyword is used to incorporate a security scanning template into the pipeline configuration?

A security analyst has reviewed a vulnerability and determined that it does not apply to their project. What action can they take in GitLab to indicate this?

A team has included the SAST template in their pipeline. The SAST job fails because the analyzer cannot detect the project's language. What is the most likely reason?

A team wants to run container scanning only on the main branch, not on feature branches, to save CI minutes. How should they configure this?

A team wants to run both SAST and DAST in their pipeline. They have included the SAST template. What additional step is required to also run DAST?

Keep studying — Security Scanning Basics