Question 1

An enterprise is implementing security controls for unstructured data in their AI system. Which measures specifically address unstructured data security challenges? (Select TWO)

Options :

A : Hidden content detection using steganalysis and metadata examination

B : Normalizing all data to third normal form

C : Content authentication using perceptual hashing to detect tampering

D : Implementing primary keys for all data items

Answer: A,C

Question 2

A company is implementing unsupervised learning for anomaly detection in financial transactions. Which security controls specifically address unsupervised learning vulnerabilities? (Select TWO)

Options :

A : Adding more clustering algorithms for ensemble voting

B : Implementing supervised fine-tuning after clustering

C : Robust clustering algorithms resistant to outlier injection

D : Statistical drift monitoring to detect poisoning of cluster distributions

Answer: C,D

Question 3

An organization's AI governance board identifies that employees frequently access external generative models for business tasks without IT approval. Which two actions should the company take to mitigate this risk?

Options :

A : Promote open public AI usage

B : Implement user access controls

C : Create a sanctioned AI tool list

D : Eliminate all AI tools

Answer: B,C

Question 4

An e-commerce platform's AI assistant has been manipulated by customers who discovered that certain user prompt patterns can extract the system's internal pricing algorithms and discount rules. Investigation shows the system prompt contained these rules for context, making them vulnerable to extraction. What fundamental system prompt security principle was violated?

Options :

A : System prompts should be limited to 100 tokens

B : System prompts should be encrypted at rest

C : System prompts should use only lowercase characters

D : System prompts should avoid containing sensitive information that shouldn't be revealed

Answer: D

Question 5

An organization deploys an AI engine that scans applications and identifies unpatched libraries, weak encryption methods, and insecure configurations. Which use case does this represent?

Options :

A : Code quality and linting

B : Vulnerability analysis

C : Automated penetration testing

D : Signature matching

Answer: B

Free CY0-001 Mock Exam – Practice Online Confidently

Buying Options: