CompTIA SecAI+ Certification Exam (CY0-001) Free Practice Test

Question 1

Developers introduce new features to their generative AI product in an effort to stand out from the competition and offer more value to customers.
Which of the following most accurately explains the risks when enabling more functionality?

A. The risks are proportional to the model ' s capabilities.

B. The risks remain the same as before the new features were added.

C. The risks increase when new features are added.

D. The risks are measured qualitatively.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

After the latest software update, a developer receives reports that the system no longer requires reauthentication to display account balances because this issue was present in a previous release. Which of the following should the developer do to best mitigate the risk of recurrence?

A. Implement AI regression testing into the continuous integration/continuous deployment (CI/CD) pipeline.

B. Ensure that AI approvals are required to push changes into production.

C. Deploy an AI-assisted change management system to schedule and track feature releases.

D. Use code commit automation to perform AI-assisted static application security testing (SAST) scans.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which of the following controls is the best way to mitigate a denial-of-service (DoS) attack?

A. Rate limiting

B. Access controls

C. Model guardrails

D. End-to-end encryption

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

A multinational company wants to implement an AI-assisted job screening solution.
Which of the following should the company reference to reduce the risk of incurring compliance-related fines?

A. Corporate policy

B. National Institute of Standards and Technology (NIST) AI Risk Management Framework (RMF)

C. International Organization for Standardization (ISO) AI standards

D. European Union (EU) AI Act

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

A human resources officer is using AI to evaluate resumes and help select candidates that meet minimum criteria. To improve the results, the human resources officer adjusts the query parameters and includes an example resume that matches a successful candidate.
Which of the following best describes this query?

A. Prompt template

B. System role

C. Distillation

D. One-shot prompting

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which of the following should an auditor reference when reviewing a company ' s human resources AI systems for legal non-compliance?

A. Organization for Economic Cooperation and Development (OECD) standard

B. National Institute of Standards and Technology (NIST) AI Risk Management Framework (RMF)

C. European Union (EU) AI Act

D. International Organization for Standardization (ISO)

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

A disgruntled employee changed the company policies that a chatbot references in order to create confusion and disrupt the business.
Which of the following AI-generated vulnerabilities is the employee exploiting?

A. Data masking

B. Data reduction

C. Data leaking

D. Data poisoning

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

A security administrator sees suspicious queries on AI logs.
Which of the following should the administrator implement to address this issue?

A. Data size

B. Agentic AI

C. Prompt firewalls

D. Rate limit

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

A security analyst finds that the AI system is under a denial-of-wallet attack.
Which of the following should the analyst enforce to protect the company? (Choose two.)

A. Modality controls

B. Content delivery network (CDN)

C. Output token controls

D. Model fine-tuning

E. Application programming interface (API) rate controls

F. Endpoint access controls

Correct Answer: C,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

An administrator, who works for a financial institution, is required to implement data security controls for data at rest within AI systems that involve data disclosure.
Which of the following is the most suitable control?

A. Data lineage

B. Rate limits

C. Encryption

D. Masking

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

CompTIA SecAI+ Certification (CY0-001) Free Practice Test