2026 Updated Verified CY0-001 dumps Q&As - 100% Pass Guaranteed
Provide Valid Dumps To Help You Prepare For CompTIA SecAI+ Certification Exam Exam
NEW QUESTION # 52
Which of the following responsible AI standards refers to a principle that clearly states the reasons behind the decisions for a particular conclusion?
- A. Explainability
- B. Transparency
- C. Auditability
- D. Accountability
Answer: A
Explanation:
Explainability is the responsible AI principle that ensures AI systems can provide clear reasoning for their decisions, allowing users to understand how and why a particular conclusion was reached.
NEW QUESTION # 53
A security administrator must provide access controls for AI systems to list tables. Which of the following should the administrator implement?
- A. Agentic AI access
- B. Data access
- C. Network access control list (NACL)
- D. Model access
Answer: B
Explanation:
Since the requirement is to control which users or systems can list tables, the proper control lies at the data access level. Implementing data access controls ensures only authorized entities can view or query the underlying tables used by the AI system.
NEW QUESTION # 54
A disgruntled employee changed the company policies that a chatbot references in order to create confusion and disrupt the business. Which of the following AI-generated vulnerabilities is the employee exploiting?
- A. Data leaking
- B. Data reduction
- C. Data poisoning
- D. Data masking
Answer: C
Explanation:
Altering the source data (policy content) that the chatbot relies on corrupts its knowledge and behavior, which is characteristic of data poisoning attacks.
NEW QUESTION # 55
A security analyst is aware of an active penetration test in the environment. The analyst examines security information and event management (SIEM) log data and notices the following output from the AI system:
Which of the following is the vulnerability that has occurred and the control the analyst should implement?
- A. The vulnerability is sensitive information disclosure, and the analyst should employ masking.
- B. The vulnerability is role impersonation, and the analyst should use validation.
- C. The vulnerability is model hallucinations, and the analyst should develop output validations.
- D. The vulnerability is jailbreaking, and the analyst should utilize role-based access control.
- E. The vulnerability is prompt injection, and the analyst should use endpoint detection response (EDR).
Answer: A
Explanation:
The log data reveals personally identifiable information (PII) such as name, address, and a full credit card number. This represents a sensitive information disclosure vulnerability. The appropriate control is data masking, which protects sensitive data in logs and outputs while still allowing necessary system monitoring.
NEW QUESTION # 56
A phishing attachment appears harmless during static analysis but behaves maliciously when executed. Which technique would detect this?
- A. Dynamic analysis in a sandbox
- B. Log correlation
- C. Digital forensics
- D. Heuristic scanning
Answer: A
Explanation:
Dynamic analysis observes real-time malicious activity.
NEW QUESTION # 57
A user interface engineer adds new graphics to the latest release of an AI-integrated application.
During the update, the engineer accidentally causes the model to retain on unverified data. After the update, the model begins to return many errors. Which of the following is the best way to mitigate future errors?
- A. Model development life cycle
- B. Web application firewall
- C. Generative adversarial network
- D. Role-based access control
Answer: A
Explanation:
Following a secure and structured model development life cycle (MDLC) ensures controls such as data validation, verification, and testing are in place. This prevents issues like retraining on unverified data and reduces the likelihood of future model errors.
NEW QUESTION # 58
Which of the following technologies is used in deepfake?
- A. Prompt engineering
- B. Transfer learning
- C. Multi-shot prompting
- D. Generative adversarial network (GAN)
Answer: D
Explanation:
Deepfakes are primarily created using GANs, where two neural networks (a generator and a discriminator) compete to produce highly realistic synthetic media, such as manipulated videos or images.
NEW QUESTION # 59
Which of the following controls is the best way to mitigate a denial-of-service (DoS) attack?
- A. Rate limiting
- B. Access controls
- C. End-to-end encryption
- D. Model guardrails
Answer: A
Explanation:
Rate limiting restricts the number of requests within a set timeframe, preventing attackers from overwhelming the system with excessive traffic, making it the best control to mitigate a DoS attack.
NEW QUESTION # 60
A vulnerability scan produces many false positives. What does this indicate?
- A. High sensitivity, low specificity
- B. High specificity, low sensitivity
- C. Low sensitivity, high specificity
- D. High confidence scoring
Answer: A
Explanation:
High sensitivity → catches many issues but lowers accuracy (more false positives).
NEW QUESTION # 61
An attacker successfully completes a denial-of-service (DoS) attack through the context window of an AI system. Thousands of characters are obfuscated and hidden behind an emoji. Which of the following techniques best mitigates this type of attack?
- A. Fraud detection
- B. Prompt filter
- C. Large language model (LLM)-as-a-judge
- D. Pattern recognition
Answer: B
Explanation:
A DoS attack through the context window relies on overwhelming the model with excessive or obfuscated input. Prompt filtering prevents such malicious or oversized inputs from being processed, ensuring that the model only receives safe, properly structured data within acceptable limits.
NEW QUESTION # 62
A social media company with more than a million lines of code wants to reduce the mean time to fix bugs and issues. Which of the following is the most balanced AI strategy to automate the vulnerability management flow?
- A. Having security analysts triage discovered issues and create tickets, but having a software engineer merge software
- B. Using AI to triage discovered issues and create tickets, but having a software engineer merge software
- C. Having security analysts triage discovered issues and create tickets, but using AI to merge software
- D. Using AI to triage discovered issues, create tickets, and merge software fixes
Answer: B
Explanation:
This approach balances automation and human oversight. AI accelerates vulnerability management by triaging issues and generating tickets, while software engineers retain responsibility for merging code changes, ensuring quality and reducing the risk of insecure or unstable code being deployed.
NEW QUESTION # 63
A global security operations center (SOC) wants to adapt and leverage the strength of AI in order to enhance its security operations. Which of the following is the best way to enhance the global SOC functions?
- A. Enable a personal assistant that can act in the global SOC with no human intervention.
- B. Summarize alerts to easily gain insights on the environment.
- C. Generate code and execute in production to help save time.
- D. Use open-source models in production to help the efficiency of threat detection and threat analysis.
Answer: B
Explanation:
AI can significantly enhance SOC operations by summarizing and correlating high volumes of alerts, enabling analysts to quickly identify patterns, prioritize threats, and gain actionable insights. This reduces analyst fatigue and improves response times without introducing unsafe automation risks.
NEW QUESTION # 64
A company wants to detect abnormal insider activity based on historical logs. Which technology is BEST?
- A. PKI
- B. UEBA
- C. SSL termination
- D. CASB
Answer: B
Explanation:
User and Entity Behavior Analytics detects deviations from normal patterns.
NEW QUESTION # 65
Which of the following would most likely be used to prove that an image is AI generated?
- A. Diffusion
- B. Guardrails
- C. Human validation
- D. Watermarking
Answer: D
Explanation:
Watermarking embeds hidden, verifiable markers into AI-generated images. These markers can later be detected to prove the image originated from an AI system, making it the most reliable method for verification.
NEW QUESTION # 66
A company wants to reduce IDS false positives. What tuning should occur FIRST?
- A. Baseline normal behavior
- B. Add new signatures
- C. Increase signature sensitivity
- D. Disable low-priority alerts
Answer: A
Explanation:
A behavioral baseline enables effective tuning and alert reduction.
NEW QUESTION # 67
What control reduces the impact radius when a single host is compromised?
- A. Obfuscation
- B. Tokenization
- C. Network segmentation
- D. Redaction
Answer: C
Explanation:
Segmentation isolates systems and limits lateral movement.
NEW QUESTION # 68
A web server shows signs of SQL injection. Which control BEST prevents this?
- A. Runtime application self-protection (RASP)
- B. SSL encryption
- C. Input validation
- D. Account lockout
Answer: C
Explanation:
Validating and sanitizing user input is the core SQLi defense.
NEW QUESTION # 69
A security team is using an AI-based tool to try to bypass organizational boundaries. The team uses AI to look at the current state and suggest different attack vectors based on the outcome of the previous ones. Which of the following techniques is the team most likely using?
- A. Fraud detection
- B. Code quality testing
- C. Manual signature matching
- D. Automated penetration testing
Answer: D
Explanation:
The described behavior - iteratively assessing the environment and adapting attack paths based on prior outcomes - matches automated penetration testing, where AI-driven tools simulate attack chains and adjust tactics dynamically.
NEW QUESTION # 70
An internal user enters a client credit card number into an internal generative machine learning (ML) model:
#User prompt: Customer Jane Doe has a new credit card that she wants to add to her account. The number is 5555-5555-5555-5555 Which of the following is the most effective way to prevent prompt injection attacks against a large language model (LLM)?
- A. Guardrails
- B. Antivirus
- C. Web application firewall (WAF)
- D. Role-based access control
Answer: A
Explanation:
Guardrails are the primary security control for LLMs to prevent prompt injection attacks. They enforce rules on what inputs are accepted and how the model responds, blocking malicious or sensitive prompts (such as credit card numbers) before they can manipulate or exploit the model.
NEW QUESTION # 71
A security consultant must summarize the impact of posture management on a machine learning (ML) use case. Which of the following is the most appropriate reference for this purpose?
- A. Generative adversarial network (GAN)
- B. National Institute of Standards and Technology (NIST) AI Risk Management Framework (RMF)
- C. European Union AI Act
- D. Organization for Economic Co-operation and Development (OECD) standards
Answer: B
Explanation:
The NIST AI RMF provides structured guidance for assessing and managing risks across the AI lifecycle, including posture management. It helps organizations align AI security practices with governance, resilience, and trustworthiness requirements.
NEW QUESTION # 72
A company develops an AI model to diagnose patients. Hospitals access the model through an integrated application programming interface (API). The security team performs a denial-of- service (DoS) attack via brute force on the model. Which of the following controls would have prevented this issue?
- A. Rate limiting
- B. Prompt firewall
- C. Tokenization
- D. Model guardrails
Answer: A
Explanation:
Rate limiting restricts the number of API requests within a specific timeframe, preventing brute- force attempts that can overwhelm the AI model and cause denial-of-service conditions.
NEW QUESTION # 73
Which of the following attacks would be the best to automate with AI during dynamic application software testing (DAST)?
- A. Distributed denial-of-service (DDoS)
- B. Data poisoning
- C. Payload creation
- D. Threat modeling
Answer: C
Explanation:
During DAST, automating the generation of diverse, targeted attack payloads lets testers probe runtime inputs (e.g., XSS, SQLi, command injection) more thoroughly and discover vulnerabilities that manual or static tests might miss.
NEW QUESTION # 74
......
Achieve Success in Actual CY0-001 Exam CY0-001 Exam Dumps: https://pass4sure.dumps4pdf.com/CY0-001-valid-braindumps.html