Free CY0-001 Exam Braindumps
CompTIA SecAI+ Questions 26–30 (page: 7)

Updated On: 17-Sep-2026

Which of the following improves the observability and auditing of an AI system?

  1. Redeploying the model
  2. Using manual detection
  3. Implementing machine learning operations (MLOps)
  4. Using anomaly detections

Answer(s): C

Explanation:

MLOps provides structured monitoring, logging, and version control for AI models. This improves observability and ensures detailed auditing of model behavior, data pipelines, and changes throughout the AI lifecycle.



Users report that the output of a generative AI application seems unrelated to the prompts and contains offensive content. A security team investigates and determines that there was an on-path attack.
Which of the following is the most likely attack method?

  1. Application server hijacking
  2. Session hijacking
  3. Domain hijacking
  4. Model hijacking

Answer(s): D



Which of the following is used to train an AI model with unstructured data?

  1. Statistical learning
  2. Fine-tuning
  3. Supervised learning
  4. Reinforcement training

Answer(s): A



A security architect performs threat modeling of an AI system. The architect needs to determine which attacks can be performed against the system.
Which of the following actions should the architect take next?

  1. Leverage a large language model (LLM) to map likely attack paths based on the code base.
  2. Quantify the risk of known vulnerabilities identified in the AI system.
  3. Identify trust boundaries and perform threat modeling with Open Worldwide Application Security Project
    (OWASP) Top 10.
  4. Analyze MITRE Adversarial Threat Landscape for AI Systems (ATLAS) for tactics, techniques, and procedures (TTPs).

Answer(s): D

Explanation:

MITRE ATLAS is specifically designed to catalog adversarial TTPs targeting AI systems. By analyzing ATLAS, the architect can determine which types of attacks are possible against the AI system, making it the most appropriate resource for threat modeling in this context.



Which of the following is the most impactful security risk associated with the use of a generative AI chatbot?

  1. Overly permissive access
  2. Data leakage
  3. Weak encryption
  4. Model validation

Answer(s): B

Explanation:

The most significant risk with generative AI chatbots is data leakage, where sensitive or regulated information could be exposed through prompts or outputs. This risk directly impacts confidentiality and compliance, making it more critical than access scope, encryption, or validation concerns.



Viewing page 7 of 31
Viewing questions 31 - 35 out of 169 questions


Post your Comments and Discuss CompTIA CY0-001 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!