Configure Security Policies GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 5)

Questions 21–22

1. 21application · easy

   A security engineer needs to update an existing security policy to add a new rule that blocks merge requests when a 'critical' severity dependency vulnerability is found. The policy currently only has a rule for 'high' severity. What is the correct way to update the policy?

   • AEdit the policy YAML to add a new rule for 'critical' severity and save the changes.
   • BDelete the existing policy and create a new one with both rules.
   • CModify the existing rule to change 'high' to 'critical' instead of adding a new rule.
   • DCreate a second policy that only handles 'critical' severity findings.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   When creating a new security policy in GitLab, which of the following must be specified?

   • AThe email address of the security team responsible for the policy
   • BThe name of the CI/CD runner that will execute the policy
   • CThe specific commit SHA that the policy will apply to
   • DThe policy type, scope, and rules
   Reveal Solution Discussion Select an answer first