A compliance officer needs to generate a report that shows which projects are compliant with a specific compliance framework and which are not. The report should be accessible to auditors. What is the best way to provide this report?

Create a custom dashboard in a BI tool by pulling data from the GitLab API.

Use the audit event log to show which projects have been tagged with the framework.

Use the Compliance Center to view the framework's projects and export the report.

Ask each project maintainer to manually confirm compliance.

A company has a compliance pipeline that runs a license scanning job. The pipeline is configured to block merge requests if a new license is detected. However, a developer needs to merge a critical hotfix that introduces a new open-source license. The compliance team wants to allow this one-time exception without weakening the policy for future merges. What is the best way to handle this?

Temporarily disable the compliance pipeline, merge the hotfix, then re-enable it.

Add the new license to the allowlist in the license scanning job.

Create a policy override that allows the specific merge request to bypass the license check.

Merge the hotfix directly to the main branch without going through a merge request.

What is the purpose of a compliance pipeline in GitLab's policy compliance enforcement?

To generate audit logs of user actions

To run required checks on projects and enforce compliance requirements

To provide a visual dashboard of compliance status

To manage user permissions and roles

GitLabCertified Security Associate

Domain 4Objective 3

Enforce Policy Compliance GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 5)

Part of the Security Policies and Approvals domain, which makes up ~19% of our current practice bank.

25questions here

5free pages

6concepts

Questions 21–25

21application · easy
A compliance officer needs to generate a report that shows which projects are compliant with a specific compliance framework and which are not. The report should be accessible to auditors. What is the best way to provide this report?
Select an answer first
22expert · hard
A company has a compliance pipeline that runs a license scanning job. The pipeline is configured to block merge requests if a new license is detected. However, a developer needs to merge a critical hotfix that introduces a new open-source license. The compliance team wants to allow this one-time exception without weakening the policy for future merges. What is the best way to handle this?
Select an answer first
23foundation · easy
Which GitLab feature allows you to create a custom compliance framework and apply it to multiple projects?
Select an answer first
24foundation · easy
In GitLab, which mechanism is primarily responsible for enforcing policy compliance across projects by automatically applying required checks?
Select an answer first
25foundation · easy
What is the purpose of a compliance pipeline in GitLab's policy compliance enforcement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GITLAB-CERTIFIED-SECURITY-SPECIALIST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitLab. “GITLAB-CERTIFIED-SECURITY-SPECIALIST” is a trademark of its owner, used for identification only.

Enforce Policy Compliance GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 5)

Questions 21–25

A compliance officer needs to generate a report that shows which projects are compliant with a specific compliance framework and which are not. The report should be accessible to auditors. What is the best way to provide this report?

Which GitLab feature allows you to create a custom compliance framework and apply it to multiple projects?

In GitLab, which mechanism is primarily responsible for enforcing policy compliance across projects by automatically applying required checks?

What is the purpose of a compliance pipeline in GitLab's policy compliance enforcement?

Keep studying — Security Policies and Approvals