Implement Static Application Security Testing (SAST) GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In a GitLab SAST report, what does a vulnerability with a 'High' severity indicate?

   • AThe vulnerability is automatically fixed by GitLab
   • BThe vulnerability is a false positive and can be ignored
   • CThe vulnerability is guaranteed to be exploitable
   • DThe vulnerability has a lower priority than a 'Critical' severity
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   How can you define a custom SAST analyzer in GitLab?

   • ABy creating a custom job in `.gitlab-ci.yml` that produces a SAST report artifact
   • BBy installing a plugin in the GitLab server
   • CBy using the `custom-sast` command in the pipeline
   • DBy writing a custom script and adding it to the `SAST_ANALYZERS` variable
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the default behavior of a GitLab SAST job when it finds vulnerabilities?

   • AThe job fails only if critical vulnerabilities are found
   • BThe job succeeds and reports the vulnerabilities
   • CThe job fails and the pipeline stops
   • DThe job automatically retries the scan
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which GitLab CI/CD variable is used to disable a specific SAST analyzer?

   • A`SAST_DISABLED_ANALYZERS`
   • B`ANALYZER_OFF`
   • C`SAST_SKIP_ANALYZERS`
   • D`SAST_EXCLUDE_ANALYZERS`
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which GitLab SAST analyzer is used for scanning JavaScript and TypeScript code?

   • ASemgrep
   • BBandit
   • CGosec
   • DESLint
   Reveal Solution Discussion Select an answer first