A security operations center (SOC) analyst needs to automate multiple security tasks by breaking them down into smaller parts. Which of the following AI tools is the best for this task?
Answer(s): A
Agentic AI is designed to autonomously break down complex tasks into smaller steps and execute them in sequence. This makes it the best tool for automating multiple security tasks in a SOC environment.
Which of the following responsible AI standards refers to a principle that clearly states the reasons behind the decisions for a particular conclusion?
Answer(s): D
Explainability is the responsible AI principle that ensures AI systems can provide clear reasoning for their decisions, allowing users to understand how and why a particular conclusion was reached.
A detection engineering team wants to use AI to automatically prevent vulnerable code from reaching production. Which of the following is the most effective way to accomplish this task?
Answer(s): C
Integrating an LLM into the CI/CD pipeline ensures automated code review at build time, blocking vulnerable code from reaching production. This enforces security checks consistently and effectively during the deployment process.
A penetration tester is assessing the controls of a deployed AI system that is designed to search and return the contents of files. The tester runs the following:Which of the following is the best control to prevent abuse of the system?
The penetration test shows that the system accepts arbitrary commands like deleteBuckets or listPermissions, which could lead to privilege abuse. The most effective control is least privilege, ensuring the service account only has access to what is strictly necessary (e.g., reading files) and not sensitive operations like deleting buckets or altering permissions.
A customer-facing, AI-powered chatbot has been jailbroken through prompt injections. As a result, the AI model is offering a 99% discount on the purchase of a new vehicle. Which of the following should be implemented to enhance the model’s robustness against such attacks?
Guardrails enforce strict rules on what the AI model can and cannot do, preventing malicious prompt injections from overriding intended behavior. In this case, guardrails would stop the chatbot from generating unauthorized offers such as extreme discounts.
Post your Comments and Discuss CompTIA CY0-001 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CY0-001 content, but please register or login to continue.