CY0 CompTIA SecAI+ Beta Free Practice Test - 20 Questions

Question 1

A security analyst at a healthcare company is testing an image classification model that diagnoses skin conditions. The model misclassifies a benign mole as malignant after a small, imperceptible change to the image pixels. Which type of attack has occurred?

Accepted Answer

Adversarial example

Question 2

Which attack aims to reconstruct sensitive training data by querying the model and analyzing its outputs?

Accepted Answer

Model inversion

Question 3

During the training of a spam classifier, an attacker subtly alters thousands of spam emails to include common keywords from legitimate emails. Over time, the model begins to classify spam as legitimate. What is the primary attack vector?

Accepted Answer

Poisoning of training data

Question 4

A company wants to train a model on user data but ensures that the model cannot reveal whether a specific individual's data was used in training. Which technique best achieves this?

Accepted Answer

Differential privacy

Question 5

In a scenario where multiple hospitals want to jointly train a model on their patient data without exposing the data to each other, which technique should be used?

Accepted Answer

Federated learning with secure aggregation

Question 6

An attacker has black-box access to a model and can observe its predictions. They want to determine if a specific person's record was part of the training dataset. Which attack best describes this?

Accepted Answer

Membership inference

Question 7

In a federated learning system, a malicious participant sends carefully crafted model updates that gradually steer the global model toward misclassifying certain inputs. What is this attack called?

Accepted Answer

Model poisoning

Question 8

Which concept in AI security refers to the ability to understand and interpret why a model made a specific decision?

Accepted Answer

Explainable AI (XAI)

Question 9

A loan approval model is found to approve applications from one demographic group at a significantly lower rate than others, even when the applicants have similar financial profiles. Which step should be taken to address this issue?

Accepted Answer

Perform bias testing and mitigation

Question 10

An attacker places a specially designed sticker on a stop sign, causing an autonomous vehicle's vision model to classify it as a speed limit sign. This is an example of:

Accepted Answer

Adversarial patch

Question 11

An attacker with API access to a cloud-based model repeatedly queries it with carefully chosen inputs to create a surrogate model that mimics the original. Which attack is this?

Accepted Answer

Model stealing

Question 12

Which security measure ensures that model inference is performed in a hardware-protected environment that isolates it from the rest of the system?

Accepted Answer

Trusted execution environment (TEE)

Question 13

When deploying an AI model that accepts user input, which practice is most critical to prevent injection attacks?

Accepted Answer

Input validation and sanitization

Question 14

A model developer wants to embed a secret pattern into a model's outputs to prove ownership if the model is stolen. Which technique should be used?

Accepted Answer

Model watermarking

Question 15

A data scientist is cleaning a dataset for training a sentiment analysis model. They discover that many samples contain offensive language that could bias the model. What should be done first?

Accepted Answer

Apply data sanitization and filtering

Question 16

In a model evaluation, the team finds that accuracy is high but the model's decisions are easily swayed by small random noise added to inputs. Which property is lacking?

Accepted Answer

Adversarial robustness

Question 17

A company is using an AI model to screen job applications. A candidate sues, claiming the model discriminated based on gender. The company cannot explain why the model made its decisions. What should the company have implemented to defend against such claims?

Accepted Answer

Explainable AI (XAI) techniques

Question 18

A financial institution wants to use homomorphic encryption for inference to protect client data. What is a major trade-off of this approach?

Accepted Answer

Significant computational overhead

Question 19

A developer is using a pre-trained model from an online repository. Before integrating it into a critical system, what is the most important security step?

Accepted Answer

Validate the model's provenance and integrity

Question 20

During an AI security audit, the team discovers that an image recognition model has a backdoor: it classifies any image with a specific yellow square as 'target'. How was the backdoor likely introduced?

Accepted Answer

Poisoning the training data with triggers

CY0 CompTIA SecAI+ Beta Free Practice Test - 20 Questions

The free lane is only the front row