CY0-001 Exam dumps PDF | Exam-Dumps.net (Page: 2)

QUESTION: 9

Which of the following is the most concerning risk for a company that allows corporate end users to use public- facing large language models (LLMs)?

Inaccuracies due to hallucinations
Out-of-date acceptable use policies
Data security regulatory violations
Malicious code generation

Answer(s): C

Explanation:

The greatest concern with employees using public-facing LLMs is the potential exposure of sensitive or regulated corporate data. Submitting such information to external systems may violate data protection laws (e.g., GDPR, HIPAA), creating legal and compliance risks that outweigh issues like hallucinations or malicious outputs.

Reveal Solution Next Question

QUESTION: 10

Which of the following requires developers to harden infrastructure to protect AI systems?

Intake processes
Acceptable use policies
Development guidelines
Configuration standards

Answer(s): D

Explanation:

Configuration standards define how infrastructure and systems must be securely set up and maintained. By following these standards, developers harden the environment that supports AI systems, reducing risks from misconfigurations and vulnerabilities.

Reveal Solution Next Question

QUESTION: 11

Which of the following is the best example of an AI model that is trained to identify multiple points from input using a neural network to provide output for authentication?

Facial recognition
Encryption key
Open Authorization (OAuth)
Bounding box

Answer(s): A

Explanation:

Facial recognition uses neural networks to analyze multiple points or features from an input image (such as eyes, nose, mouth, and facial structure) to generate a unique identifier for authentication purposes.

Reveal Solution Next Question

QUESTION: 12

An organization is developing and implementing AI features into a customer service application.
Which of the following practices should the organization put the place before releasing the application for customer trials?

Data masking and sanitization
External compliance audits
Approved AI vendor lists
Third-party risk management

Answer(s): A

Explanation:

Before releasing AI features for customer trials, it is critical to protect sensitive information that may be used during testing. Data masking and sanitization ensure customer or corporate data is anonymized or obfuscated, reducing the risk of data exposure while still allowing realistic evaluation of the AI system.

Reveal Solution Next Question

QUESTION: 13

An internal user enters a client credit card number into an internal generative machine learning (ML) model:

#User prompt: Customer Jane Doe has a new credit card that she wants to add to her account. The number is 5555-5555-5555-5555

Which of the following is the most effective way to prevent prompt injection attacks against a large language model (LLM)?

Guardrails
Antivirus
Web application firewall (WAF)
Role-based access control

Answer(s): A

Explanation:

Guardrails are the primary security control for LLMs to prevent prompt injection attacks. They enforce rules on what inputs are accepted and how the model responds, blocking malicious or sensitive prompts (such as credit card numbers) before they can manipulate or exploit the model.

Reveal Solution Next Question

QUESTION: 14

A security alert triggers an agentic system. An analyst notices the following payload in the logs"

The alert includes multiple shell commands that are not typically run as part of any hardening.
Which of the following is the most effective control to implement?

Adding logic that includes approved strings before running the shell commands
Deprecating model usage and retaining the model with safer parameters
Modifying the application to ignore the SECURITY_UPDATE tag
Using only approved libraries when interacting with agentic systems

Answer(s): A

Explanation:

The payload in the alert attempts to trick the system into executing unauthorized shell commands. The most effective control is to implement allow-list validation (approved strings) before execution. This ensures that only predefined, safe commands are executed, blocking prompt injection attempts that introduce malicious code such as the fake patch script.

Reveal Solution Next Question

QUESTION: 15

A global security operations center (SOC) wants to adapt and leverage the strength of AI in order to enhance its security operations.
Which of the following is the best way to enhance the global SOC functions?

Generate code and execute in production to help save time.
Enable a personal assistant that can act in the global SOC with no human intervention.
Use open-source models in production to help the efficiency of threat detection and threat analysis.
Summarize alerts to easily gain insights on the environment.

Answer(s): D

Explanation:

AI can significantly enhance SOC operations by summarizing and correlating high volumes of alerts, enabling analysts to quickly identify patterns, prioritize threats, and gain actionable insights. This reduces analyst fatigue and improves response times without introducing unsafe automation risks.

Reveal Solution Next Question

QUESTION: 16

An attacker successfully completes a denial-of-service (DoS) attack through the context window of an AI system. Thousands of characters are obfuscated and hidden behind an emoji.
Which of the following techniques best mitigates this type of attack?

Fraud detection
Large language model (LLM)-as-a-judge
Pattern recognition
Prompt filter

Answer(s): D

Explanation:

A DoS attack through the context window relies on overwhelming the model with excessive or obfuscated input. Prompt filtering prevents such malicious or oversized inputs from being processed, ensuring that the model only receives safe, properly structured data within acceptable limits.

Reveal Solution Next Question

CompTIA CY0-001 Exam (page: 2) CompTIA SecAI+ Beta Updated on: 31-Mar-2026

QUESTION: 9

Explanation:

QUESTION: 10

Explanation:

QUESTION: 11

Explanation:

QUESTION: 12

Explanation:

QUESTION: 13

Explanation:

QUESTION: 14

Explanation:

QUESTION: 15

Explanation:

QUESTION: 16

Explanation:

CompTIA CY0-001 Exam (page: 2)
CompTIA SecAI+ Beta
Updated on: 31-Mar-2026