CY0-001 Exam Dumps - CompTIA SecAI+ v1 Exam

Basic Concept: Deepfakes are AI-generated synthetic media that convincingly replace or manipulate a person ' s likeness, voice, or actions in images and videos. Creating realistic deepfakes requires generative AI techniques capable of learning and reproducing complex data distributions. CompTIA SecAI+ Exam Objectives cover deepfake technology under basic AI concepts.

Why A is Correct: Generative Adversarial Networks (GANs) are the primary technology behind deepfakes. A GAN consists of two competing neural networks: a generator that creates synthetic content and a discriminator that evaluates whether content is real or fake. Through adversarial training, the generator continuously improves at creating convincing synthetic media such as realistic human faces, voice clones, and video manipulations indistinguishable from authentic recordings.

Why B is Wrong: Multi-shot prompting is a prompting technique where multiple examples are provided to an LLM to guide its responses. It is an inference technique for language models and has no role in generating synthetic video or image deepfake content.

Why C is Wrong: Prompt engineering is the practice of crafting effective prompts to guide LLM outputs. It is a communication strategy for working with text-based AI systems, not a technology for generating synthetic media.

Why D is Wrong: Transfer learning is a training technique that repurposes knowledge from one domain to another, improving model performance with limited data. While it can be used in model training pipelines, it is not the core technology that enables deepfake generation.

Fairness is the responsible AI principle most clearly violated because the system is producing a disproportionately gender-skewed outcome in a consequential employment decision. CompTIA SecAI+ explicitly identifies fairness as a responsible AI consideration and identifies the introduction of bias as an AI risk. A resume-screening system should evaluate candidates using relevant employment criteria without systematically disadvantaging a protected or unrelated demographic group. Recommending mostly male candidates signals a potential bias in the training data, feature selection, historical examples, model design, or decision threshold and therefore requires fairness assessment and mitigation. Transparency concerns whether stakeholders have appropriate visibility into how the AI system operates. Explainability concerns whether individual decisions can be described in understandable terms. Reliability concerns whether the system performs consistently and safely according to its intended specifications. Those properties remain important, but none directly describes the demographic disparity presented in the scenario. Because the evidence specifically indicates unequal treatment or outcomes between demographic groups, fairness is the responsible AI principle most directly implicated.

================

Basic Concept: Assessing attack probability and impact for ML systems requires a resource specifically built to catalog real-world adversarial attacks against AI and ML systems, including documented techniques with associated impact information. CompTIA SecAI+ Exam Objectives identify MITRE ATLAS as the authoritative ML threat landscape resource.

Why B is Correct: MITRE ATLAS is specifically designed as a comprehensive knowledge base of adversarial tactics, techniques, and case studies targeting AI and ML systems. It catalogs real-world attacks with associated probability factors derived from actual incidents and provides impact assessments for various attack types including data poisoning, model evasion, model extraction, and inference attacks. This directly enables the probability and impact assessment the team requires.

Why A is Wrong: The CVE AI working group focuses on identifying and cataloging specific vulnerability instances in AI software components. While useful for vulnerability management, it does not provide the comprehensive threat landscape coverage with probability and impact assessments for ML-specific attack tactics that ATLAS provides.

Why C is Wrong: The MIT risk repository is an academic resource cataloging general AI-related risks. It is research-oriented and does not provide the practitioner-focused, operational attack taxonomy and case study library that MITRE ATLAS offers for ML threat modeling.

Why D is Wrong: OWASP provides application security guidance including the OWASP LLM Top 10. While valuable for LLM-specific risks, OWASP does not provide the comprehensive ML threat landscape coverage or the probability and impact data that MITRE ATLAS offers for assessing the full spectrum of ML attack scenarios.

Basic Concept: LLM API billing is primarily based on token consumption. High costs resulting from staff using powerful, verbose models can be controlled by limiting the maximum tokens processed per interaction and restricting which models staff can access. CompTIA SecAI+ Study Guide covers token management as the primary cost control mechanism for AI deployments.

Why D is Correct: Implementing token limits caps the maximum tokens consumed per API call for both input and output. This directly controls the per-interaction cost by preventing excessively long prompts or overly verbose model responses from generating large token bills. Combined with model tier restrictions, token limits ensure that interactions with powerful models remain within budget constraints regardless of how extensively staff use the service.

Why A is Wrong: Storage monitoring tracks the utilization and performance of data storage systems. Storage costs are separate from LLM API token-based billing and monitoring storage does not address the high API charges resulting from excessive model usage by staff.

Why B is Wrong: Modality types refer to the input formats an AI model accepts such as text, images, audio, or video. While different modalities have different pricing, managing modality types is not the direct cost control lever. Token consumption is the primary cost driver for text-based interactions.

Why C is Wrong: Prompt firewalls inspect and filter prompt content for security and policy compliance. While they can block certain types of queries, they are designed for security purposes, not as financial controls to limit token consumption or enforce cost budgets across staff usage.

Basic Concept: AI models can inadvertently memorize sensitive information from their training data. Certain attack techniques can exploit this memorization to extract private information from a deployed model, even without direct access to the training dataset. CompTIA SecAI+ Study Guide covers model inversion as an AI-specific data exposure attack vector.

Why B is Correct: Model inversion is an attack where an adversary queries a deployed AI model with carefully crafted inputs to reconstruct or infer sensitive training data. For example, an attacker could query a facial recognition model with optimized images to reconstruct faces of individuals from the training set, or query a medical diagnosis model to infer patient records used in training. This directly exposes sensitive data that was supposed to be protected.

Why A is Wrong: Overfitting is a model training quality issue where a model learns training data too specifically and performs poorly on new data. While it can indicate that sensitive data was memorized, overfitting itself is a performance concern rather than directly a data exposure attack vector.

Why C is Wrong: Data normalization is a preprocessing technique that scales numerical features to a common range to improve training performance. It is a data preparation step with no direct relevance to sensitive data exposure or privacy attacks.

Why D is Wrong: Hyperparameter tuning adjusts configuration parameters of a model to optimize its performance during training. It is an optimization technique with no relevance to protecting against sensitive data exposure attacks.

Basic Concept: ML models excel at classification tasks, learning to assign incoming data points to predefined categories based on patterns in training data. In a SOC context, alert classification is the highest-value triage function ML can perform. CompTIA SecAI+ Exam Objectives address AI-assisted security operations under Domain 3.

Why C is Correct: ML-based alert classification automatically analyzes characteristics of each alert and assigns it to a severity category such as critical, high, medium, or low, or to a threat type such as malware or intrusion attempt. This dramatically reduces analyst workload and speeds triage by prioritizing which alerts demand immediate human attention, directly solving the high-volume problem.

Why A is Wrong: Applying filters on specific alerts is a rule-based operation achievable without ML using simple log management tools. It requires no learning capability and does not adapt to new or evolving threats.

Why B is Wrong: Automatically patching systems is a remediation action requiring validated, controlled processes. Having an ML system autonomously patch production systems without human oversight poses unacceptable operational and security risk.

Why D is Wrong: Summarizing alert content is a useful generative AI function but does not provide prioritization value for triage. Classification tells analysts what to act on first; summarization only rephrases existing information.

Basic Concept: Managing security risks in AI model training requires a comprehensive framework specifically designed for AI risk identification, assessment, and mitigation across the entire AI lifecycle including data collection, training, and deployment. CompTIA SecAI+ Study Guide identifies NIST AI RMF as the primary resource for AI-specific risk management.

Why A is Correct: The NIST AI Risk Management Framework is purpose-built for managing risks throughout the AI lifecycle. It provides structured guidance for identifying, assessing, and mitigating risks specific to AI systems including training data quality, model bias, data poisoning, and training pipeline vulnerabilities. Its AI-specific scope makes it the most appropriate framework for managing model training security issues.

Why B is Wrong: ISO 27001 is an information security management system standard focused on general IT security controls and risk management. It does not specifically address AI model training risks, data pipeline integrity, or ML-specific vulnerabilities.

Why C is Wrong: The OECD provides high-level AI governance principles and policy recommendations at an international level. It offers ethical and policy guidance but does not provide operational risk management guidance for securing AI model training processes.

Why D is Wrong: GDPR is a European data protection regulation focused on personal data privacy, consent, and individual rights. While relevant to training data governance, it does not address the technical security risks of model training pipelines or ML system vulnerabilities.

Basic Concept: AI-generated content including personalized text, synthetic voice, and deepfake video has dramatically enhanced the effectiveness and scalability of social engineering attacks. Understanding how AI amplifies specific attack types is key to CompTIA SecAI+ basic AI concepts in the cybersecurity context.

Why B is Correct: Phishing attacks are most dramatically enabled by AI-generated content. AI can generate highly personalized, grammatically perfect phishing emails tailored to individual targets using publicly available information. It can create convincing deepfake audio and video for voice phishing (vishing) and video phishing, replicate executive communication styles for business email compromise, and generate phishing campaigns at massive scale. The quality and personalization that previously required skilled human social engineers can now be automated with AI.

Why A is Wrong: Model poisoning is a specific attack against AI systems that corrupts training data to manipulate model behavior. While sophisticated, it is a targeted AI security attack rather than a broad cybercrime enabled by AI-generated content at scale.

Why C is Wrong: Ransomware is malware that encrypts victim data and demands payment for decryption keys. While AI can assist in ransomware development, ransomware deployment relies on code execution and network propagation techniques more than AI-generated content.

Why D is Wrong: Remote code execution involves exploiting vulnerabilities to run arbitrary code on a target system. It relies on technical vulnerability exploitation rather than AI-generated content. AI might assist in finding vulnerabilities, but RCE is not primarily enabled by content generation.