In a GitLab CI/CD pipeline, what is a security gate?

A tool that scans the pipeline configuration for errors

A feature that automatically fixes vulnerabilities

A condition that blocks a pipeline stage or job if certain security criteria are not met

A firewall rule that restricts network access to the pipeline

A security team uses GitLab Vulnerability Report to manage a backlog of vulnerabilities. They notice that many vulnerabilities have been open for months without any update. The team wants to improve the remediation workflow. Which action would be most effective?

Automatically close any vulnerability that has been open for more than 90 days.

Export the vulnerability report to a spreadsheet and share it with the development team.

Increase the frequency of dependency scanning to catch new vulnerabilities sooner.

Assign each vulnerability to an owner, set a due date, and track status changes in the Vulnerability Report.

In a GitLab DevSecOps pipeline, a developer commits code that introduces a vulnerable dependency. The vulnerability is detected by a dependency scanner and a vulnerability record is created. What is the correct sequence of stages in the vulnerability lifecycle from this point?

Discovery → Reporting → Remediation → Closure

Identification → Triage → Remediation → Verification → Closure

Identification → Remediation → Triage → Verification → Closure

Triage → Identification → Remediation → Closure → Verification

A security manager wants to track the trend of vulnerabilities over time to see if the organization is improving its security posture. Which metric would be most useful for this purpose?

Number of developers in the team

Number of open vulnerabilities over time

Number of merge requests merged

GitLabCertified Security Associate

Domain 5Objective 1

Manage Vulnerabilities Across the DevSecOps Lifecycle GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 2)

Part of the Vulnerability Management domain, which makes up ~16% of our current practice bank.

24questions here

5free pages

6concepts

Questions 6–10

6foundation · easy
Which GitLab security scanning tool is used to identify vulnerabilities in the source code itself, such as SQL injection or insecure deserialization patterns, without executing the application?
Select an answer first
7foundation · easy
In a GitLab CI/CD pipeline, what is a security gate?
Select an answer first
8application · medium
A security team uses GitLab Vulnerability Report to manage a backlog of vulnerabilities. They notice that many vulnerabilities have been open for months without any update. The team wants to improve the remediation workflow. Which action would be most effective?
Select an answer first
9foundation · easy
In a GitLab DevSecOps pipeline, a developer commits code that introduces a vulnerable dependency. The vulnerability is detected by a dependency scanner and a vulnerability record is created. What is the correct sequence of stages in the vulnerability lifecycle from this point?
Select an answer first
10foundation · easy
A security manager wants to track the trend of vulnerabilities over time to see if the organization is improving its security posture. Which metric would be most useful for this purpose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GITLAB-CERTIFIED-SECURITY-SPECIALIST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitLab. “GITLAB-CERTIFIED-SECURITY-SPECIALIST” is a trademark of its owner, used for identification only.