What is the purpose of a security gate in the context of dependency scanning?

To automatically fix vulnerabilities before merging

To notify developers about new vulnerabilities via email

To encrypt the dependency scanning report

To block a pipeline or merge request when vulnerabilities exceed a defined threshold

Where can you change the severity of a vulnerability finding in GitLab?

In the merge request widget, by clicking 'Change Severity'

In the project's Security & Compliance settings, under 'Severity Levels'

In the vulnerability report, by editing the finding's details

In the `.gitlab-ci.yml` file, by setting a severity variable

A team wants to enable dependency scanning for a project that uses a custom CI/CD pipeline. They want to avoid modifying the existing pipeline structure as much as possible. What is the most efficient way to add dependency scanning?

Create a new job in the `.gitlab-ci.yml` that runs the `gemnasium` analyzer directly.

Enable Auto DevOps in the project settings.

Add `include: - template: Jobs/Dependency-Scanning.gitlab-ci.yml` to the `.gitlab-ci.yml` file.

Install the GitLab dependency scanning CLI tool locally and configure it to upload results.

What does the `DS_EXCLUDED_ANALYZERS` CI/CD variable do?

Sets the output format of the dependency scanning report

Prevents specified analyzers from running

Defines the severity threshold for failing the pipeline

Specifies the image prefix for all analyzers

GitLabCertified Security Associate

Domain 2Objective 2

Configure Dependency Scanning GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 1)

Part of the Secret and Dependency Scanning domain, which makes up ~21% of our current practice bank.

19questions here

4free pages

6concepts

Questions 1–5

1foundation · easy
What is the purpose of a security gate in the context of dependency scanning?
Select an answer first
2foundation · easy
Where can you change the severity of a vulnerability finding in GitLab?
Select an answer first
3foundation · easy
Which CI/CD variable is used to specify the major version of the dependency scanning analyzers?
Select an answer first
4application · medium
A team wants to enable dependency scanning for a project that uses a custom CI/CD pipeline. They want to avoid modifying the existing pipeline structure as much as possible. What is the most efficient way to add dependency scanning?
Select an answer first
5foundation · easy
What does the `DS_EXCLUDED_ANALYZERS` CI/CD variable do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GITLAB-CERTIFIED-SECURITY-SPECIALIST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitLab. “GITLAB-CERTIFIED-SECURITY-SPECIALIST” is a trademark of its owner, used for identification only.