CompTIA SecAI+ Certification - CY0-001 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

A healthcare company deploys an AI chatbot that implements retrieval-augmented generation (RAG) using the company ' s historical data set. The chatbot output contains patient information.
Which of the following is the most effective technique to mitigate this vulnerability?

A. Minimization B. Normalization C. Classification D. Masking

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

An attacker successfully completes a denial-of-service (DoS) attack through the context window of an AI system. Thousands of characters are obfuscated and hidden behind an emoji.
Which of the following techniques best mitigates this type of attack?

A. Prompt filter B. Large language model (LLM)-as-a-judge C. Fraud detection D. Pattern recognition

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

A security analyst finds that the AI system is under a denial-of-wallet attack.
Which of the following should the analyst enforce to protect the company? (Choose two.)

A. Content delivery network (CDN) B. Model fine-tuning C. Endpoint access controls D. Output token controls E. Application programming interface (API) rate controls F. Modality controls

Discussion 0

Correct Answer: D,E Vote an answer

Question 4

A security administrator must provide access controls for AI systems to list tables.
Which of the following should the administrator implement?

A. Data access B. Agentic AI access C. Network access control list (NACL) D. Model access

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

A team of data scientists is ready to release a model for enterprise use. The team wants to protect the model from unintentional changes or tampering.
Which of the following is the most appropriate action?

A. Restrict access to only IT professionals in the organization. B. Change the model to a large language model (LLM) for interactive features with guardrails. C. Integrate an application programming interface (API) with identity and access management (IAM) roles to interact with the model. D. Provide secure copies of the model for local runtime usage.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

A security analyst is aware of an active penetration test in the environment. The analyst examines SIEM log data and notices the following AI system output:

Which of the following is the vulnerability that has occurred and the control the analyst should implement?

A. The vulnerability is sensitive information disclosure, and the analyst should employ masking. B. The vulnerability is prompt injection, and the analyst should use endpoint detection response (EDR). C. The vulnerability is model hallucinations, and the analyst should develop output validations. D. The vulnerability is jailbreaking, and the analyst should utilize role-based access control. E. The vulnerability is role impersonation, and the analyst should use validation.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

A disgruntled employee changed the company policies that a chatbot references in order to create confusion and disrupt the business.
Which of the following AI-generated vulnerabilities is the employee exploiting?

A. Data reduction B. Data leaking C. Data poisoning D. Data masking

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

A security alert triggers an agentic system. An analyst notices the following payload in the logs. The alert includes multiple shell commands that are not typically run as part of any hardening:

Which of the following is the most effective control to implement?

A. Modifying the application to ignore the SECURITY_UPDATE tag B. Deprecating model usage and retaining the model with safer parameters C. Using only approved libraries when interacting with agentic systems D. Adding logic that includes approved strings before running the shell commands

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).