In GitLab, what is the primary purpose of a compliance framework?

To store audit logs for compliance purposes

To automatically fix security vulnerabilities in code

To tag projects and associate them with compliance requirements

To manage user access to projects

A company has multiple compliance frameworks, each with different compliance pipelines. The compliance team wants to ensure that a project can only be associated with one framework at a time. Is this possible in GitLab?

Yes, but only if the frameworks are in the same group.

Yes, a project can only have one compliance framework assigned.

No, but a project can have multiple compliance pipelines.

No, a project can have multiple compliance frameworks assigned.

A development team accidentally pushed a commit that contains a secret. The project has a security policy that should block secrets from being committed. However, the commit was pushed successfully. What is the most likely reason the policy did not block the commit?

The policy was applied to the wrong branch.

The policy was configured to only alert, not block, on secret detection.

The secret detection scan was not included in the compliance pipeline.

The developer had elevated permissions that bypassed the policy.

What information does a compliance report in GitLab typically provide?

A summary of the project's compliance status against applicable frameworks

A list of all users who have accessed the project

A list of all security vulnerabilities in the project

A detailed log of all merge request approvals

GitLabCertified Security Associate

Domain 4Objective 3

Enforce Policy Compliance GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 1)

Part of the Security Policies and Approvals domain, which makes up ~19% of our current practice bank.

25questions here

5free pages

6concepts

Questions 1–5

1application · easy
A compliance officer needs to verify that all projects in a group are tagged with the correct compliance framework and that no project has been excluded. Which report should the officer use to get an overview of compliance framework coverage?
Select an answer first
2foundation · easy
In GitLab, what is the primary purpose of a compliance framework?
Select an answer first
3application · easy
A company has multiple compliance frameworks, each with different compliance pipelines. The compliance team wants to ensure that a project can only be associated with one framework at a time. Is this possible in GitLab?
Select an answer first
4application · medium
A development team accidentally pushed a commit that contains a secret. The project has a security policy that should block secrets from being committed. However, the commit was pushed successfully. What is the most likely reason the policy did not block the commit?
Select an answer first
5foundation · easy
What information does a compliance report in GitLab typically provide?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GITLAB-CERTIFIED-SECURITY-SPECIALIST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitLab. “GITLAB-CERTIFIED-SECURITY-SPECIALIST” is a trademark of its owner, used for identification only.