CompTIA CY0-001 問題練習

Question No : 1
Which of the following strengthens the performance of a large language model (LLM) for malicious reconnaissance?

• A.Enhancing a foundational model with the inclusion of retrieval-augmented generation (RAG)
• B.Creating a web scraper script using AI to capture the company website
• C.Instructing an AI assistant to query as an administrator
• D.Prompting a chatbot to describe server naming patterns and Internet Protocol (IP) ranges

答えを確認する

正解:

Question No : 2
An employee wants a consulting company to procure a data set that contains age, ethnicity, and diabetes status. During development, the employer wants to ensure the integrity of the data .
Which of the following is the best strategy to accomplish this task?

• A.Implementing checksums
• B.Conducting human evaluation
• C.Querying the model
• D.Enabling log monitoring

答えを確認する

正解:

Question No : 3
A cybersecurity analyst must use pattern recognition on a data set containing unstructured data .
Which of the following models is the best for this task?

• A.Long short-term memory
• B.Convolutional neural network
• C.Decision tree
• D.Logistic regression

答えを確認する

正解:

Question No : 4
A security consultant must summarize the impact of posture management on a machine learning (ML) use case .
Which of the following is the most appropriate reference for this purpose?

• A.Organization for Economic Co-operation and Development (OECD) standards
• B.National Institute of Standards and Technology (NIST) AI Risk Management Framework (RMF)
• C.European Union AI Act
• D.Generative adversarial network (GAN)

答えを確認する

正解:

Question No : 5
A disgruntled employee changed the company policies that a chatbot references in order to create confusion and disrupt the business .
Which of the following AI-generated vulnerabilities is the employee exploiting?

• A.Data reduction
• B.Data masking
• C.Data poisoning
• D.Data leaking

答えを確認する

正解:

Question No : 6
Which of the following attacks would be the best to automate with AI during dynamic application software testing (DAST)?

• A.Distributed denial-of-service (DDoS)
• B.Data poisoning
• C.Payload creation
• D.Threat modeling

答えを確認する

正解:

Question No : 7
A security team is using an AI-based tool to try to bypass organizational boundaries. The team uses AI to look at the current state and suggest different attack vectors based on the outcome of the previous ones .
Which of the following techniques is the team most likely using?

• A.Manual signature matching
• B.Code quality testing
• C.Fraud detection
• D.Automated penetration testing

答えを確認する

正解:

Question No : 8
A company develops an AI model to diagnose patients. Hospitals access the model through an integrated application programming interface (API). The security team performs a denial-of-service (DoS) attack via brute force on the model .
Which of the following controls would have prevented this issue?

• A.Tokenization
• B.Model guardrails
• C.Rate limiting
• D.Prompt firewall

答えを確認する

正解:

Question No : 9
Which of the following is an example of how a security analyst uses generative AI in the triage process?

• A.To predict the next attack target with higher accuracy
• B.To use statistical analysis for malicious code assessment
• C.To summarize security findings by category
• D.To tag malware using machine learning (ML) algorithms

答えを確認する

正解:

Question No : 10
Faculty members at a university are concerned about potential inherent bias and inconsistency in one department’s AI plagiarism detection service.
Which of the following principles will most likely to address their concerns?

• A.Transparency
• B.Explainability
• C.Consistency
• D.Accountability

答えを確認する

正解:

Question No : 11
An organization is concerned with the exposure of sensitive data .
Which of the following is the most relevant security concern?

• A.Overfitting
• B.Model inversion
• C.Data normalization
• D.Hyperparameter tuning

答えを確認する

正解:

Question No : 12
A data set containing medical information is put into a machine learning (ML) model that is designed to predict specific illnesses for a population. In the process of verifying the reliability of the system, the compliance officer realizes that the system cannot reliably predict illnesses for certain segments of the population .
Which of the following types of risk is most applicable to this case?

• A.Bias
• B.Consistency
• C.Transparency
• D.Inclusiveness

答えを確認する

正解:

Question No : 13
User experience is declining since the launch of a large language model (LLM) in internal networks .
Which of the following should be the highest priority for the prompt engineers?

• A.Customer success management
• B.Sales life cycle
• C.Quality control
• D.Business objectives

答えを確認する

正解:

Question No : 14
A customer-facing, AI-powered chatbot has been jailbroken through prompt injections. As a result, the AI model is offering a 99% discount on the purchase of a new vehicle .
Which of the following should be implemented to enhance the model’s robustness against such attacks?

• A.Bias filtering
• B.System prompt
• C.Log monitoring
• D.Guardrails

答えを確認する

正解:

Question No : 15
A penetration tester is assessing the controls of a deployed AI system that is designed to search and return the contents of files.
The tester runs the following:



Which of the following is the best control to prevent abuse of the system?

• A.Implementing custom detection rules for anomalous model behavior
• B.Segmenting the workload into a separate virtual private cloud (VPC)
• C.Adding a large language model (LLM) guardrails library to the application code
• D.Reducing the privilege scope of the service account

答えを確認する

正解: