CY0-001 무료 덤프문제 온라인 액세스

A developer is selecting authentication controls for an AI system.
Which of the following is the best way to prevent threat actor replay attacks?

• A.Identity provider (IdP) federation
• B.Identity and access management access keys
• C.Secure Shell (SSH)-based certificate authentication
• D.Expiring session tokens

A human resources officer is using AI to evaluate resumes and help select candidates that meet minimum criteria. To improve the results, the human resources officer adjusts the query parameters and includes an example resume that matches a successful candidate.
Which of the following best describes this query?

• A.One-shot prompting
• B.System role
• C.Prompt template
• D.Distillation

A security operations center (SOC) has a very high volume of logs and alerts. The manager proposes the implementation of a machine learning (ML) system to help with triage.
Which of the following tasks is most suitable?

• A.Applying filters on specific alerts
• B.Identifying and classifying alerts
• C.Automatically patching vulnerable systems
• D.Summarizing the content of alerts

A security analyst is preparing a presentation for the sales team that describes the most common vulnerabilities that are specific to AI applications.
Which of the following is the best source for the analyst to consult?

• A.Open Worldwide Application Security Project (OWASP)
• B.International Organization for Standards (ISO) 27001
• C.Common Weakness Enumeration (CWE)
• D.National Institute of Technologies Risk Management Framework (NIST-RMF)

Instructions: Use the drop-down menus to define two appropriate security controls for each component of the AI system. Each control may be used only once.
An engineer is deploying a new AI system and wants to integrate it into the core system through an API.

정답:

Explanation:

Basic Concept: This is a Performance-Based Question (PBQ) - a HOTSPOT/simulation item requiring interactive selection in the actual exam. It tests the candidate ' s ability to map appropriate security controls to AI system components such as API gateway, model endpoint, data layer, and authentication layer.
Key Concept - Appropriate Controls by Component: For an API gateway connecting an AI system, typical controls include API key authentication, rate limiting, TLS encryption, and input validation. For the model endpoint, controls include IAM role-based access, audit logging, and guardrails. For data access components, encryption at rest and data masking are appropriate. For the authentication layer, MFA and expiring session tokens are relevant.
Why This Matters: The CompTIA SecAI+ Study Guide emphasizes defense-in-depth for AI system integration, ensuring each architectural layer has dedicated, appropriate security controls. The principle of least privilege should guide access control assignments at each component, while availability controls such as rate limiting protect against abuse.
Reference: CompTIA SecAI+ Exam Objectives Domain 2 (Securing AI Systems) covers AI system component security controls. Candidates should study the mapping of controls to infrastructure components including API gateways, model serving endpoints, data stores, and identity management layers. In the live exam, select the most specific and directly relevant control for each component based on the component ' s function and risk profile.