In a DAST scan report, what does the 'severity' of a vulnerability indicate?

The time it takes to fix the vulnerability

The level of risk the vulnerability poses to the application

The likelihood that the vulnerability will be exploited

The number of times the vulnerability was detected

What is the purpose of the DAST job in a GitLab CI/CD pipeline?

To compile the application and run unit tests

To analyze the source code for security flaws

To scan the running application for security vulnerabilities

To deploy the application to a staging environment

What is the primary purpose of Dynamic Application Security Testing (DAST) in the software development lifecycle?

To analyze source code for security vulnerabilities before the application is compiled

To scan container images for known vulnerabilities in dependencies

To test a running application for security vulnerabilities by simulating external attacks

To enforce security policies on infrastructure configuration files

A security engineer is running a DAST scan on a web application. The scan report shows that the scanner only tested a few pages and did not discover many of the application's features. The engineer suspects the scanner did not crawl the application effectively. What should the engineer check first?

Increase the scan timeout to give the scanner more time to crawl.

Review the DAST scan configuration to ensure the target URL is correct and that the scanner is allowed to follow links and forms.

Re-run the scan with a different scan profile to see if the coverage improves.

Disable the crawl phase and manually specify all URLs to test.

GitLabCertified Security Associate

Domain 1Objective 2

Implement Dynamic Application Security Testing (DAST) GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 4)

Part of the Static and Dynamic Application Security Testing domain, which makes up ~19% of our current practice bank.

23questions here

5free pages

8concepts

Questions 16–20

16foundation · easy
In a DAST scan report, what does the 'severity' of a vulnerability indicate?
Select an answer first
17foundation · easy
What is the first phase in a typical DAST workflow?
Select an answer first
18foundation · easy
What is the purpose of the DAST job in a GitLab CI/CD pipeline?
Select an answer first
19foundation · easy
What is the primary purpose of Dynamic Application Security Testing (DAST) in the software development lifecycle?
Select an answer first
20application · medium
A security engineer is running a DAST scan on a web application. The scan report shows that the scanner only tested a few pages and did not discover many of the application's features. The engineer suspects the scanner did not crawl the application effectively. What should the engineer check first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GITLAB-CERTIFIED-SECURITY-SPECIALIST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitLab. “GITLAB-CERTIFIED-SECURITY-SPECIALIST” is a trademark of its owner, used for identification only.