A team has added dependency scanning to their pipeline. The scan job completes successfully, but the team cannot find the Dependency Scanning report in the merge request widget. What is the most likely cause?

The pipeline was triggered by a schedule instead of a merge request.

The job did not produce a report artifact in the expected format.

The dependency scanning job ran before the build job.

The project does not have a GitLab Ultimate license.

A developer sees a vulnerability in the Security tab with a 'Medium' severity. They want to understand the details of the vulnerability, including the affected file and line number. Where should they look?

Click on the vulnerability to open its detailed view.

Check the pipeline logs for the SAST job.

Look in the project's README file.

Review the merge request description.

A team has a pipeline that includes SAST, DAST, and dependency scanning. The pipeline is failing because the DAST job cannot reach the application URL. The team has verified the application is deployed and accessible. What is the most likely cause?

The DAST job is not allowed to fail.

The SAST job is running before the DAST job.

The dependency scanning job is consuming too many resources.

The `DAST_WEBSITE` variable is not set or is set to an incorrect URL.

What information is typically shown for each vulnerability in the GitLab security report?

The exact date and time the vulnerability was first discovered on the internet

The name of the developer who introduced the vulnerability

The vulnerability's severity and description

The cost to fix the vulnerability

GitLabCertified Fundamentals Associate

Domain 5Objective 1

Set up Basic Security Scanning GITLAB-CERTIFIED-GIT-ASSOCIATE Practice Questions (Page 4)

Part of the Security Scanning Basics domain, which makes up ~13% of our current practice bank.

27questions here

6free pages

5concepts

Questions 16–20

16application · medium
A team has added dependency scanning to their pipeline. The scan job completes successfully, but the team cannot find the Dependency Scanning report in the merge request widget. What is the most likely cause?
Select an answer first
17foundation · easy
Which GitLab security scanning type is designed to analyze a running web application for security vulnerabilities by simulating attacks against it?
Select an answer first
18application · easy
A developer sees a vulnerability in the Security tab with a 'Medium' severity. They want to understand the details of the vulnerability, including the affected file and line number. Where should they look?
Select an answer first
19expert · hard
A team has a pipeline that includes SAST, DAST, and dependency scanning. The pipeline is failing because the DAST job cannot reach the application URL. The team has verified the application is deployed and accessible. What is the most likely cause?
Select an answer first
20foundation · easy
What information is typically shown for each vulnerability in the GitLab security report?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GITLAB-CERTIFIED-GIT-ASSOCIATE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitLab. “GITLAB-CERTIFIED-GIT-ASSOCIATE” is a trademark of its owner, used for identification only.