How does GitLab enforce a security gate on merge requests based on container scanning results?

By requiring a manual approval from a security team member

By disabling the merge button until the vulnerabilities are fixed

By automatically reverting the merge if vulnerabilities are found after merge

By blocking the merge if the 'CS_SEVERITY_THRESHOLD' variable is exceeded

What happens when a user 'dismisses' a vulnerability in GitLab's vulnerability report?

The vulnerability is marked as accepted and hidden from the default view

The vulnerability is reported to the GitLab security team

The vulnerability is automatically fixed in the next pipeline run

The vulnerability is permanently removed from the report

Besides editing .gitlab-ci.yml, how else can a user enable container scanning for a project?

By creating a new project from the 'Container Scanning' template

By installing a GitLab Runner with Docker executor

Through the Security Configuration page in the GitLab UI

By adding a container registry variable in the project settings

What is the primary purpose of container scanning in GitLab?

To monitor runtime container behavior and detect active intrusions

To enforce that all container images are signed before deployment

To identify vulnerabilities in the container image's base OS packages and application dependencies

To verify that the container image was built from a trusted base image

A container scanning job fails with the error 'failed to pull image'. What is the most likely cause?

The GitLab Runner does not have Docker installed

The container image is too large to scan

The container scanning analyzer is outdated

The CI/CD job does not have permission to access the container registry

GitLabCertified Security Associate

Domain 3Objective 1

Implement Container Scanning GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 2)

Part of the Container Scanning domain, which makes up ~14% of our current practice bank.

27questions here

6free pages

7concepts

Questions 6–10

6foundation · easy
How does GitLab enforce a security gate on merge requests based on container scanning results?
Select an answer first
7foundation · easy
What happens when a user 'dismisses' a vulnerability in GitLab's vulnerability report?
Select an answer first
8foundation · easy
Besides editing .gitlab-ci.yml, how else can a user enable container scanning for a project?
Select an answer first
9foundation · easy
What is the primary purpose of container scanning in GitLab?
Select an answer first
10foundation · easy
A container scanning job fails with the error 'failed to pull image'. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GITLAB-CERTIFIED-SECURITY-SPECIALIST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitLab. “GITLAB-CERTIFIED-SECURITY-SPECIALIST” is a trademark of its owner, used for identification only.