After a merge request pipeline completes, the security team wants to see which dependencies have licenses that are not approved. Where should they look in GitLab?

The License Compliance report in the merge request.

The project's Settings > CI/CD > License Compliance page.

The merge request's 'Changes' tab.

The pipeline log for the license scanning job.

What is a recommended practice for maintaining license approval policies over time?

Regularly review and update the policy to reflect current licensing requirements

Create a new policy for every merge request

Set the policy to allow all licenses to avoid blocking merge requests

Only update the policy when a merge request is blocked

Where can you view the license compliance report for a project in GitLab?

In the merge request widget and in the project's Security & Compliance section

Only in the group's Audit Events page

Only in the project's Settings page

A security admin is explaining to a developer why a license approval policy is needed. The developer asks: 'Why can't we just rely on the license report?' What is the best answer?

The license report is too slow to be useful in a CI pipeline.

The license report is only available on GitLab.com, not self-managed.

The license report only shows information; it does not enforce any rules or block merges.

The license report is only generated for paid tiers, so it is not always available.

GitLabCertified Security Associate

Domain 6Objective 2

Manage License Approval Policies GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 4)

Part of the License Compliance domain, which makes up ~10% of our current practice bank.

20questions here

4free pages

7concepts

Questions 16–20

16application · medium
After a merge request pipeline completes, the security team wants to see which dependencies have licenses that are not approved. Where should they look in GitLab?
Select an answer first
17foundation · easy
What is a recommended practice for maintaining license approval policies over time?
Select an answer first
18foundation · easy
Where can you view the license compliance report for a project in GitLab?
Select an answer first
19foundation · easy
In GitLab, how can you scope an exception to a license approval policy?
Select an answer first
20application · medium
A security admin is explaining to a developer why a license approval policy is needed. The developer asks: 'Why can't we just rely on the license report?' What is the best answer?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GITLAB-CERTIFIED-SECURITY-SPECIALIST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitLab. “GITLAB-CERTIFIED-SECURITY-SPECIALIST” is a trademark of its owner, used for identification only.