In a GitLab security policy, what does the 'scope' define?

The specific projects, groups, or branches that the policy applies to

The type of security scanner that will run

The maximum number of vulnerabilities allowed in a project

The list of users who can edit the policy

A security team wants to enforce a policy that blocks merge requests when a 'critical' vulnerability is found, but they also want to allow an exception for a specific project that is in the process of remediating known issues. They want the exception to be temporary and easily removable. What is the best approach?

Edit the original policy to remove the 'critical' rule for the specific project, then add it back later.

Create a second policy that excludes the specific project from the 'critical' rule, and remove it when remediation is complete.

Disable the original policy for the specific project and re-enable it later.

Create a project-level override that changes the action to 'require_approval' for the specific project.

What action can a GitLab security policy take when its conditions are met?

Change the project's visibility from private to public

Add a new member to the project

Automatically resolve all open issues in the project

Block the merge request from being merged

GitLabCertified Security Associate

Domain 4Objective 1

Configure Security Policies GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 2)

Part of the Security Policies and Approvals domain, which makes up ~19% of our current practice bank.

22questions here

5free pages

8concepts

Questions 6–10

6foundation · easy
In a GitLab security policy, what does the 'scope' define?
Select an answer first
7expert · medium
A security team wants to enforce a policy that blocks merge requests when a 'critical' vulnerability is found, but they also want to allow an exception for a specific project that is in the process of remediating known issues. They want the exception to be temporary and easily removable. What is the best approach?
Select an answer first
8foundation · easy
Which GitLab feature provides a high-level view of security vulnerabilities and policy violations across a group?
Select an answer first
9foundation · easy
Which GitLab security policy type is used to enforce rules based on merge request attributes such as the author or the target branch?
Select an answer first
10foundation · easy
What action can a GitLab security policy take when its conditions are met?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GITLAB-CERTIFIED-SECURITY-SPECIALIST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitLab. “GITLAB-CERTIFIED-SECURITY-SPECIALIST” is a trademark of its owner, used for identification only.

Configure Security Policies GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 2)

Questions 6–10

In a GitLab security policy, what does the 'scope' define?

Which GitLab feature provides a high-level view of security vulnerabilities and policy violations across a group?

Which GitLab security policy type is used to enforce rules based on merge request attributes such as the author or the target branch?

What action can a GitLab security policy take when its conditions are met?

Keep studying — Security Policies and Approvals