最新のCY0-001問題集で試験を準備する

CompTIA CY0-001 試験概要:

CompTIA CY0-001 試験シラバストピック:

CompTIA SecAI+ Certification 認定 CY0-001 試験問題：

1. A security architect performs threat modeling of an AI system. The architect needs to determine which attacks can be performed against the system.
Which of the following actions should the architect take next?

A) Quantify the risk of known vulnerabilities identified in the AI system.
B) Identify trust boundaries and perform threat modeling with Open Worldwide Application Security Project (OWASP) Top 10.
C) Analyze MITRE Adversarial Threat Landscape for AI Systems (ATLAS) for tactics, techniques, and procedures (TTPs).
D) Leverage a large language model (LLM) to map likely attack paths based on the code base.

2. Instructions: Use the drop-down menus to define two appropriate security controls for each component of the AI system. Each control may be used only once.
An engineer is deploying a new AI system and wants to integrate it into the core system through an API.

3. Which of the following responsible AI standards refers to a principle that clearly states the reasons behind the decisions for a particular conclusion?

A) Accountability
B) Transparency
C) Explainability
D) Auditability

4. An organization recently created a custom model that integrates with a language model (LLM). The developer notices that the application programming interface (API) costs have increased.
Which of the following is the best control to reduce cost?

A) Reducing the model size
B) Implementing prompt templates
C) Adjusting token limits
D) Increasing central processing unit (CPU) and memory

5. A security analyst notices that regardless of user-submitted prompts, an AI model always returns unsanitized responses. These responses are then passed to multiple plug-ins. The analyst is concerned with the potential security implications.
Which of the following Open Worldwide Application Security Project (OWASP) categories addresses this vulnerability?

A) Misinformation
B) Unbounded consumption
C) Prompt injection
D) Improper output handling

質問と回答：