A security analyst is reviewing secret detection findings in the security dashboard. They see a finding that was dismissed by a developer, but the analyst believes it is a real secret. What should the analyst do?

Accept the dismissal and move on.

Change the rule severity to 'Blocker' to prevent future dismissals.

Delete the finding from the dashboard.

Reopen the finding and assign it to the developer for review.

A developer accidentally commits a real API key to a feature branch. The key is already pushed to the remote. What is the first step they should take?

Remove the key from the file and force-push the branch.

Revoke the API key immediately.

Dismiss the secret detection finding as a false positive.

Add the file to `.gitignore` and commit the change.

Which of the following is a valid way to enable secret detection in a GitLab project?

Add a `security` job to the `.gitlab-ci.yml` file

Add the `secret_detection` job to the CI/CD pipeline

Enable the 'Secret Detection' feature flag in the project settings

Install the GitLab Security Scanner extension in the IDE

Which GitLab security scanning category does secret detection belong to?

Dynamic application security testing (DAST)

GitLabCertified Security Associate

Domain 2Objective 1

Configure Secret Detection GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 1)

Part of the Secret and Dependency Scanning domain, which makes up ~21% of our current practice bank.

24questions here

5free pages

6concepts

Questions 1–5

1foundation · easy
In which report can you see secret detection findings directly in a merge request?
Select an answer first
2application · medium
A security analyst is reviewing secret detection findings in the security dashboard. They see a finding that was dismissed by a developer, but the analyst believes it is a real secret. What should the analyst do?
Select an answer first
3application · medium
A developer accidentally commits a real API key to a feature branch. The key is already pushed to the remote. What is the first step they should take?
Select an answer first
4foundation · easy
Which of the following is a valid way to enable secret detection in a GitLab project?
Select an answer first
5foundation · easy
Which GitLab security scanning category does secret detection belong to?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GITLAB-CERTIFIED-SECURITY-SPECIALIST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitLab. “GITLAB-CERTIFIED-SECURITY-SPECIALIST” is a trademark of its owner, used for identification only.