Free Practice Questions for CompTIA CY0-001 Exam

The matching behavior between the unauthorized dark-web model and the company ' s proprietary model strongly indicates a model-theft or unauthorized model-copying risk. Model encryption is the most appropriate control among the available choices because it directly protects proprietary model artifacts, including model weights and other sensitive intellectual property, from unauthorized access or extraction when stored or transferred. CompTIA SecAI+ specifically identifies model theft as an AI-system attack and lists encryption among the compensating controls used to protect AI systems. Parameter anonymization is not the primary protection for proprietary model weights and does not prevent unauthorized possession of the model itself. A prompt firewall analyzes prompts for malicious or prohibited input but does not protect model files from theft. Input validation similarly protects an application from malformed or malicious inputs rather than safeguarding the model ' s intellectual property. Therefore, strengthening protection of the model artifact through encryption is the most directly applicable mitigation for future deployments.

================

Basic Concept: LLM hallucinations occur when the model generates plausible-sounding but factually incorrect or fabricated information. For internal content management solutions where accuracy is critical, detecting and handling hallucinated responses before they are acted upon is essential. CompTIA SecAI+ Study Guide covers response validation as a mitigation for hallucination risks.

Why B is Correct: Response validation implements checks that verify the accuracy and relevance of LLM-generated responses before they are presented to users or acted upon. This can involve cross-referencing responses against authoritative internal data sources, using a secondary model to evaluate response accuracy, or implementing confidence scoring that flags low-confidence responses for human review. Response validation directly addresses the hallucination problem by catching inaccurate responses before they cause harm.

Why A is Wrong: Model training addresses hallucinations at the model level by providing more accurate training data or fine-tuning. While effective long-term, it requires significant time and resources and does not provide immediate protection against hallucinations in the currently deployed model.

Why C is Wrong: Access controls manage who can query the LLM and what resources they can access. They do not inspect or validate the accuracy of the model ' s responses, so they cannot mitigate hallucination risks.

Why D is Wrong: Integrity monitoring tracks whether data or systems have been tampered with or changed unexpectedly. It is relevant for detecting unauthorized modifications but does not validate whether LLM-generated content accurately reflects reality or internal authoritative data.

Basic Concept: User account credentials stored in a database must be protected against unauthorized disclosure. The security of credentials at rest requires cryptographic controls that prevent even database administrators or attackers with database access from reading plaintext passwords. CompTIA SecAI+ Study Guide covers credential security controls as part of AI application security.

Why C is Correct: Implementing hashing and encryption for credential protection is the industry-standard approach. Passwords should be hashed using strong, slow algorithms such as bcrypt, Argon2, or scrypt with unique salts, making them computationally infeasible to reverse even if the database is compromised. Additional sensitive credential data can be encrypted. Together, hashing and encryption ensure that account credentials remain protected even if the underlying storage is accessed by unauthorized parties.

Why A is Wrong: Patching the model with new datasets updates the AI model ' s training data and knowledge. It does not address the security of user account credentials stored in the application ' s authentication database.

Why B is Wrong: Updating Linux and virtual server software patches system vulnerabilities and is important for overall security hygiene. However, it does not implement specific protections for the account credentials themselves stored in the application database.

Why D is Wrong: Deploying an authenticated API requires users to authenticate to use the API, improving access control. While this complements credential security, it does not protect the storage of credentials at rest and does not replace hashing and encryption of the credential values themselves.

Basic Concept: The gap between training performance and test performance is a classic indicator of a specific model quality problem. Understanding this phenomenon and its causes is fundamental to AI model development. CompTIA SecAI+ Study Guide covers overfitting under basic AI concepts and model quality.

Why B is Correct: Overfitting occurs when a model learns the training data too specifically — memorizing noise, outliers, and specific patterns in the training set rather than learning generalizable underlying patterns. The model achieves high accuracy on training data but fails to generalize to new, unseen test data. This produces exactly the scenario described: excellent training performance combined with poor test performance. Overfitting is the quintessential cause of this training-testing performance gap.

Why A is Wrong: Fine-tuning is a training technique that adapts a pre-trained model to a new task or domain using additional training data. It is a deliberate training process, not a description of why a model ' s performance degrades from training to testing.

Why C is Wrong: Regularization is a training technique specifically used to prevent overfitting by adding penalties to large model weights, encouraging the model to learn simpler, more generalizable patterns. It is the solution to overfitting, not its cause.

Why D is Wrong: Inference is the process of using a trained model to make predictions on new data. It describes the operational use of a model, not a quality characteristic that explains why performance differs between training and testing phases.

Tokens are the most appropriate measurement because LLM processing and resource consumption are fundamentally tied to the number of tokens processed in prompts and generated in responses. CompTIA SecAI+ specifically includes token limits among gateway security controls and requires knowledge of AI monitoring for prompts, responses, processing, and cost.

Monitoring token consumption is particularly relevant when investigating denial-of-service or resource-exhaustion conditions. An attacker can submit excessive, repeated, or unusually large inputs that consume the model ' s context capacity and computational resources. Tracking token utilization therefore gives administrators a practical indicator of how heavily the LLM is being consumed and can support thresholds, quotas, rate controls, and anomaly detection.

A transformer is the neural-network architecture underlying many modern LLMs; it is not a unit used to measure utilization. A chain of thoughts refers to intermediate reasoning behavior and does not quantify model consumption. A prompt is an input submitted to the model, but simply counting prompts does not account for their potentially very different sizes. Token measurement therefore provides the most useful utilization metric.

================

Domain-specific specialization is a major advantage of using a small language model when cost efficiency matters. CompTIA SecAI+ requires candidates to distinguish both LLMs and SLMs within natural language processing concepts. An SLM can be trained or fine-tuned for a narrowly defined task such as interpreting SIEM events, endpoint terminology, security alerts, and incident patterns. Because it does not require the enormous parameter count and broad general-purpose knowledge of a large model, an SLM can provide efficient task-specific inference while requiring less memory and computational capacity. This can reduce infrastructure and operational costs substantially. Broad dataset training is characteristic of general-purpose foundation models and tends to increase rather than reduce training and compute requirements. Data aggregation is a preprocessing or analytics function and is not an inherent SLM advantage. Data privacy can improve when smaller models are deployed locally, but local deployment is an architectural choice rather than the defining cost-related benefit represented by the available choices. A model concentrated on domain-specific cybersecurity information can therefore deliver the required SIEM-analysis capability more economically than a general-purpose LLM.

Basic Concept: OWASP has published the Top 10 vulnerabilities for Large Language Model Applications, each addressing a distinct category of LLM security risk. Understanding which OWASP category maps to specific LLM vulnerability scenarios is a key competency in the CompTIA SecAI+ Study Guide under securing AI systems.

Why D is Correct: Improper output handling (OWASP LLM02) occurs when an application passes LLM-generated outputs to downstream systems such as plug-ins, web browsers, or databases without proper validation, sanitization, or encoding. This can enable XSS, SQL injection, remote code execution, or other injection attacks against plug-ins and downstream systems. The scenario exactly matches this: unsanitized AI responses are automatically passed to multiple plug-ins, which could execute malicious content in the model ' s output.

Why A is Wrong: Misinformation refers to the AI generating false or misleading content that users might believe. It is a content accuracy concern related to hallucinations and false information propagation, not a vulnerability describing how model outputs are handled by downstream systems.

Why B is Wrong: Prompt injection involves crafting inputs to manipulate model behavior and override instructions. While it can be a contributing cause of unsafe outputs, the vulnerability described — passing unsanitized outputs to plug-ins — is specifically the output handling failure, not the injection mechanism itself.

Why C is Wrong: Unbounded consumption (OWASP LLM10) refers to resource exhaustion attacks including denial-of-wallet and denial-of-service through excessive token consumption. It addresses resource management vulnerabilities, not the security implications of passing model outputs to downstream systems.