Free Practice Questions for CompTIA CY0-001 Exam

Basic Concept: A replay attack occurs when an attacker captures a valid authentication token or credential and reuses it to impersonate a legitimate user. Preventing replay attacks requires ensuring that captured credentials cannot be successfully reused after a defined period or after their intended single use. CompTIA SecAI+ Study Guide covers replay attack prevention under AI system authentication.

Why C is Correct: Expiring session tokens have a limited validity window, typically a few minutes to hours. If an attacker captures a token, they can only use it until it expires. Short expiration times dramatically reduce the window of opportunity for replay attacks. This is the most direct and effective control specifically targeting replay attack prevention, as expired tokens are rejected even if intercepted.

Why A is Wrong: IdP federation enables single sign-on across multiple systems using federated identity providers. While it standardizes authentication, it does not inherently prevent replay attacks on captured tokens unless combined with short token expiration and proper validation.

Why B is Wrong: SSH certificate authentication uses cryptographic certificates for strong authentication. While more secure than password-based SSH, certificates alone do not prevent replay attacks unless they include timestamps, nonces, or other anti-replay mechanisms that invalidate captured credentials.

Why D is Wrong: IAM access keys are long-lived credentials that provide programmatic access to services. They are typically static and do not expire automatically, making them vulnerable to replay attacks if intercepted. They are less suitable for replay attack prevention than expiring session tokens.

Basic Concept: AI systems that rely on knowledge bases, vector databases, or reference documents are vulnerable to attacks that corrupt or manipulate that source data. When an adversary deliberately modifies the data an AI uses, this is a form of data poisoning. CompTIA SecAI+ Study Guide covers data poisoning as a core AI vulnerability.

Why C is Correct: Data poisoning is an attack where an adversary intentionally corrupts or manipulates the data that an AI system uses for training, inference, or reference. In this scenario, the employee modified the company policies document that the chatbot uses as its knowledge base, causing the chatbot to provide incorrect, misleading, or confusing information to users. This is a classic indirect data poisoning attack targeting the AI ' s reference data rather than its model weights.

Why A is Wrong: Data reduction refers to techniques that decrease the volume or dimensionality of data for processing efficiency. It is a data engineering concept, not an attack vector or vulnerability classification.

Why B is Wrong: Data masking replaces sensitive data values with anonymized equivalents to protect privacy. It is a data protection control used legitimately, not an attack that an employee would exploit to cause disruption.

Why D is Wrong: Data leaking involves unauthorized disclosure of sensitive information from an AI system or its associated data stores. The employee ' s action of manipulating data is an integrity attack, not a confidentiality violation involving leakage of data to unauthorized parties.

Basic Concept: In AI governance, each role holds distinct responsibilities. Understanding these roles is core to CompTIA SecAI+ Domain 4 (AI Governance, Risk, and Compliance).

Why D is Correct: The Data Scientist is responsible for translating business use cases into working AI/ML models. They analyze business requirements, identify the appropriate machine learning approach, and develop models that fulfill specific business objectives. According to the CompTIA SecAI+ Study Guide, data scientists bridge raw data and actionable AI solutions by building and validating models derived from business-driven needs.

Why A is Wrong: A Platform Architect designs and manages the infrastructure and technical platforms hosting AI systems. Their focus is architectural design of the environment, not model development from business use cases.

Why B is Wrong: An AI Risk Analyst identifies, evaluates, and mitigates risks associated with AI adoption. Their role is governance and risk-oriented, not model creation.

Why C is Wrong: An MLOps Engineer operationalizes, deploys, monitors, and maintains AI models in production. They take models already built by data scientists and ensure reliable operation at scale, not develop them from business use cases.

Basic Concept: In AI teams, different roles hold distinct responsibilities for specific aspects of the AI system. Data quality issues such as incorrect formatting and missing values fall within the domain of data engineering, which is responsible for designing, building, and maintaining the data pipelines and datasets that feed AI models. CompTIA SecAI+ Study Guide covers AI team role definitions under governance and basic AI concepts.

Why C is Correct: A Data Engineer is responsible for building and maintaining the data pipelines, transformation processes, and data quality controls that supply AI models with properly formatted, complete data. Addressing incorrectly formatted data and missing values is a core data engineering responsibility, as these professionals own the ETL (Extract, Transform, Load) processes, data validation rules, and data quality frameworks that ensure the model receives clean, usable input.

Why A is Wrong: A Platform Engineer designs and maintains the computing infrastructure and platforms that host AI systems. Their focus is the technical environment and deployment infrastructure, not the quality or formatting of the data consumed by models.

Why B is Wrong: An MLOps Engineer manages the deployment, monitoring, and operational lifecycle of AI models in production. While they may detect data quality issues through monitoring, resolving data formatting and missing value problems is the responsibility of data engineers who own the data pipelines.

Why D is Wrong: An AI Architect designs the overall AI system architecture, component interactions, and technical strategy. While they define data requirements, the hands-on work of correcting data formatting errors and filling missing values belongs to the data engineering function.

Basic Concept: Prompting techniques for LLMs include various approaches to guide model behavior. Providing examples within prompts is a powerful technique that leverages the model ' s in-context learning capability to guide response format and quality. CompTIA SecAI+ Study Guide covers prompting techniques under basic AI concepts.

Why E is Correct: One-shot prompting involves providing exactly one example within a prompt to demonstrate to the model the desired input-output format or response style. This single example guides the model ' s understanding of the task without requiring extensive fine-tuning. It is a well-established prompting technique that uses examples to inform model behavior.

Why F is Correct: Multi-shot prompting (also called few-shot prompting) involves providing multiple examples within a prompt to further clarify the desired output pattern. Multiple examples help the model identify consistent patterns and produce more accurate, consistent responses. Both one-shot and multi-shot are specifically defined by their use of examples in prompts.

Why A is Wrong: A user prompt is the input message submitted by a user to the AI system. It is the general term for any user input, not a specific technique that describes the practice of providing examples.

Why B is Wrong: A system prompt sets the model ' s behavior, persona, and constraints at the session level. While a system prompt could contain examples, the term specifically refers to the system-level instruction context, not the technique of example provision.

Why C is Wrong: A prompt template is a reusable structured format with placeholders for variable inputs. It standardizes prompt structure but is not defined by the practice of including examples.

Why D is Wrong: Quantization is a model compression technique that reduces model size by representing weights with lower precision numbers. It is a model optimization technique completely unrelated to prompting practices.

Basic Concept: Before ingesting data from multiple sources — both structured and unstructured — into an AI-powered SIEM system, the data must be prepared to ensure quality, consistency, and usability. Data from diverse sources often contains noise, errors, duplicates, and formatting inconsistencies that will degrade AI performance if not addressed. CompTIA SecAI+ covers data preparation as a prerequisite for AI system effectiveness.

Why C is Correct: Data cleansing is the process of detecting and correcting or removing corrupt, inaccurate, incomplete, and duplicate data. Before collecting data from multiple structured and unstructured SIEM sources, engineers must cleanse the data to standardize formats, remove duplicates, fill missing values, and eliminate noise. Clean input data is fundamental to producing accurate AI-generated insights and reliable LLM interactions in the SIEM context.

Why A is Wrong: Balancing addresses class distribution imbalance in labeled training data for classification models. While relevant when training ML detection models, it is not the primary consideration before initial data collection from diverse SIEM sources.

Why B is Wrong: Verification confirms that data meets expected quality standards and validates its accuracy against trusted sources. It is a post-collection quality check performed after cleansing, not the first step before data collection.

Why D is Wrong: Vector storage refers to databases that store embeddings for semantic search, relevant for RAG systems. It is a storage architecture decision made after data is collected, processed, and prepared, not a pre-collection technique.

Basic Concept: Neural networks can be trained to identify and match complex multi-point patterns in data. For biometric authentication, facial recognition uses deep neural networks to extract and compare dozens to hundreds of facial feature points from an input image. CompTIA SecAI+ covers neural network-based authentication under basic AI concepts.

Why A is Correct: Facial recognition systems use neural networks specifically trained to identify multiple facial landmarks and feature points such as eye distance, nose shape, and jawline contour from input images. These extracted feature vectors are compared against stored templates to authenticate individuals, making this the ideal example of multi-point neural network-based authentication output.

Why B is Wrong: An encryption key is a cryptographic artifact, not an AI model output. Encryption keys are generated mathematically, not through neural network training or multi-point feature identification from biometric inputs.

Why C is Wrong: OAuth is an open authorization protocol framework that handles delegated access and permission grants between services. It is an authentication delegation standard, not an AI model that processes input through neural networks.

Why D is Wrong: A bounding box is an output of object detection models that draws a rectangular box around detected objects in an image. While it uses neural networks, it identifies object location rather than multiple feature points for authentication purposes.

Basic Concept: Generative AI chatbots interact with users in natural language and may access organizational knowledge bases, databases, or prior conversations. The conversational nature of these systems creates unique risks around sensitive information disclosure. CompTIA SecAI+ Study Guide ranks data leakage as the primary security concern for generative AI chatbots.

Why B is Correct: Data leakage occurs when a generative AI chatbot inadvertently reveals sensitive information including PII, confidential business data, intellectual property, training data, or system configurations in its responses. This can happen through prompt injection attacks, insufficient output filtering, or the model memorizing and reproducing sensitive training data. The impact is immediate, potentially irreversible, and can result in regulatory violations, competitive disadvantage, and reputational damage.

Why A is Wrong: Overly permissive access is a contributing factor that can exacerbate data leakage but is an access control design issue rather than the most directly impactful runtime risk of operating a generative AI chatbot.

Why C is Wrong: Weak encryption is a data protection concern for data in transit or at rest. While important, it is a configuration issue separate from the generative AI chatbot ' s core operational risks and is not specific to chatbot technology.

Why D is Wrong: Model validation ensures a model performs as expected before deployment. While important for quality assurance, it is a development lifecycle activity rather than an ongoing operational security risk associated with running a chatbot.

Option A is correct because a system prompt contains the developer- or platform-defined instructions that establish how the AI should behave throughout an interaction. It can define the model’s role, objectives, prohibited actions, response style, tool-use boundaries, and security constraints before the user submits a request. That description matches an input supplied by a developer to govern later AI interactions. Option B is the end user’s prompt or request; it expresses what the user wants in a particular turn and normally has lower authority than system-level instructions. Option C, zero-shot prompting, describes asking the model to perform a task without providing an example. Option D, multi-shot prompting, supplies multiple examples to demonstrate the desired input or output pattern. Neither zero-shot nor multi-shot identifies the authority or source of the instruction. In a secure AI application, system instructions should be protected from unauthorized modification, tested for conflicts, and reinforced with technical controls rather than treated as the sole security boundary. The essential distinction is prompt hierarchy: system instructions configure persistent behavior, while user prompts request individual tasks.

================

Basic Concept: AI chatbots are designed with safety guidelines and content policies that prevent them from generating harmful, offensive, or inappropriate content. When users find ways to bypass these restrictions through crafted prompts, they have " jailbroken " the model. CompTIA SecAI+ Study Guide covers jailbreaking as a key AI vulnerability category.

Why C is Correct: Jailbreaking is the process of using cleverly crafted prompts to bypass an AI model ' s built-in safety restrictions, content policies, and behavioral guardrails, causing it to produce outputs it was designed to refuse. The scenario describes a chatbot that was designed for automobile configuration assistance but is producing offensive responses following customer prompts, indicating that customers have successfully prompted the model to bypass its safety constraints and generate prohibited content.

Why A is Wrong: Model skewing refers to attacks or biases that cause a model to favor certain outputs or perspectives systematically over time, often through data manipulation. It describes a gradual distortion of model behavior, not a direct user-prompted bypass of safety restrictions in a single interaction.

Why B is Wrong: Model theft involves extracting or replicating a proprietary model ' s functionality or architecture through repeated queries. It is an intellectual property attack aimed at stealing the model ' s knowledge, not an attack that causes the model to produce offensive content.

Why D is Wrong: Insecure output handling occurs when an application fails to properly validate or sanitize AI-generated outputs before using them in ways that could cause harm such as passing AI output directly to a system command or database query. It describes a developer implementation vulnerability, not the act of a user prompting a model to bypass its safety constraints.