How can you disable a specific dependency scanning analyzer for a project?

Remove the analyzer's Docker image from the GitLab registry

Set the `DS_EXCLUDED_ANALYZERS` variable to include the analyzer name

Set the analyzer's version to 'none' in the CI/CD configuration

Delete the analyzer's job from the `.gitlab-ci.yml` file

What is the primary purpose of GitLab dependency scanning?

To identify known vulnerabilities in project dependencies

To monitor running containers for runtime threats

To scan the application's source code for custom logic flaws

To detect secrets and credentials accidentally committed to the repository

A team is experiencing long pipeline times because dependency scanning runs on every commit. They want to reduce the scan time without compromising security. They have a large monorepo with multiple languages. What is the most effective strategy?

Run dependency scanning only on the default branch by adding a rule to the job.

Set `DS_MAJOR_VERSION: "4"` to use the latest analyzers, which are faster.

Increase the `DS_ANALYZER_IMAGE_PREFIX` to use a faster registry.

Use `DS_EXCLUDED_ANALYZERS` to disable analyzers for languages not present in the project.

GitLabCertified Security Associate

Domain 2Objective 2

Configure Dependency Scanning GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 2)

Part of the Secret and Dependency Scanning domain, which makes up ~21% of our current practice bank.

19questions here

4free pages

6concepts

Questions 6–10

6application · medium
A team is using a self-managed GitLab instance behind a firewall. They need to pull the dependency scanning analyzer images from a local registry. Which variable should they configure?
Select an answer first
7foundation · easy
How can you disable a specific dependency scanning analyzer for a project?
Select an answer first
8foundation · easy
What is the primary purpose of GitLab dependency scanning?
Select an answer first
9foundation · easy
Which variable allows you to specify a custom image prefix for dependency scanning analyzers?
Select an answer first
10expert · hard
A team is experiencing long pipeline times because dependency scanning runs on every commit. They want to reduce the scan time without compromising security. They have a large monorepo with multiple languages. What is the most effective strategy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GITLAB-CERTIFIED-SECURITY-SPECIALIST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitLab. “GITLAB-CERTIFIED-SECURITY-SPECIALIST” is a trademark of its owner, used for identification only.

Configure Dependency Scanning GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 2)

Questions 6–10

A team is using a self-managed GitLab instance behind a firewall. They need to pull the dependency scanning analyzer images from a local registry. Which variable should they configure?

How can you disable a specific dependency scanning analyzer for a project?

What is the primary purpose of GitLab dependency scanning?

Which variable allows you to specify a custom image prefix for dependency scanning analyzers?

A team is experiencing long pipeline times because dependency scanning runs on every commit. They want to reduce the scan time without compromising security. They have a large monorepo with multiple languages. What is the most effective strategy?

Keep studying — Secret and Dependency Scanning