GITLABGitLab Certified Security Associate
The GitLab Certified Security Specialist certification validates your ability to embed security into every stage of the DevOps lifecycle using GitLab's built-in security features. It is designed for security professionals and DevOps practitioners who want to demonstrate they can configure, manage, and act on security scanning and compliance controls within GitLab. Earning this credential shows you can operationalize DevSecOps and shift security left with confidence.
329 practice questions
GITLAB-CERTIFIED-SECURITY-SPECIALIST Curriculum
Every domain, objective, and concept the GITLAB-CERTIFIED-SECURITY-SPECIALIST exam measures.
- SAST Overview
- SAST Configuration
- SAST Analyzers
- SAST Results Interpretation
- SAST Integration with Merge Requests
- SAST Customization
- SAST and CI/CD Pipeline
- DAST Overview
- DAST vs SAST
- DAST Workflow
- DAST Configuration
- DAST Integration
- DAST Results Analysis
- DAST Remediation
- DAST Limitations
- Interpreting SAST results
- Interpreting DAST results
- Prioritizing vulnerabilities
- Validating scan findings
- Mapping findings to remediation
- Secret detection overview
- Enabling secret detection
- Secret detection configuration options
- Understanding secret detection rules
- Interpreting secret detection results
- Handling false positives and vulnerabilities
- Dependency scanning overview
- Enabling dependency scanning
- Configuring dependency scanning variables
- Managing dependency scanning analyzers
- Handling dependency scanning false positives
- Integrating dependency scanning with other features
- Understanding remediation workflows
- Prioritizing findings
- Fixing secret detection findings
- Fixing dependency scanning findings
- Verifying remediation
- Managing false positives
- Using GitLab features for remediation
- Container scanning overview
- Enabling container scanning
- Configuring scanning policies
- Understanding scan results
- Managing vulnerabilities
- Integrating with merge requests
- Troubleshooting container scanning
- Container image vulnerability scanning fundamentals
- Identifying vulnerability sources
- Interpreting scan results
- Configuring container scanning
- Assessing vulnerability impact
- Security policy fundamentals
- Creating security policies
- Policy types
- Policy scope and rules
- Policy actions
- Policy management
- Policy evaluation and enforcement
- Policy reporting and monitoring
- Merge request approval rules
- Approval settings configuration
- Approval groups and users
- Approval workflow enforcement
- Approval rule overrides
- Approval status and notifications
- Understanding policy compliance enforcement
- Configuring compliance frameworks
- Implementing compliance pipelines
- Managing compliance reports
- Handling policy violations
- Integrating with external compliance tools
- Vulnerability Lifecycle Overview
- Vulnerability Identification
- Vulnerability Triage and Prioritization
- Vulnerability Remediation Workflows
- Vulnerability Reporting and Metrics
- Integration with CI/CD
- Vulnerability triage process
- Severity and risk assessment
- Remediation strategies
- Verification of remediation
- Documentation and reporting
- License compliance policies
- License approval workflows
- License compliance in merge requests
- License compliance reporting
- Define license approval policies
- Create license approval policies
- Configure policy rules
- Manage policy exceptions
- Enforce license approval policies
- Review license compliance reports
- Update and maintain policies
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for GITLAB-CERTIFIED-SECURITY-SPECIALIST, so none is invented.