Free CY0-001 Comptia CY0-001 Practice Test Question

Question 1 (Topic 1)

A security engineer needs to monitor an AI-based system for runtime operations. The engineer is mostly concerned about the visibility of internal activity. Which of the following is the most appropriate monitoring solution?

Select an option, then click Submit answer.

○ Deploying a security information and event management (SIEM) tool
○ Implementing a web application firewall (WAF) with header logging
○ Relying on vendor model controls and monitoring prompt inputs
○ Enabling stack call and debugging level traces at the function level

Reference / correct answer:

Enabling stack call and debugging level traces at the function level

Most accepted answer: D. Enabling stack call and debugging level traces at the function level

Community votes: A=1, D=4

Selected Answer: D When a security engineer's primary goal is to gain visibility into the internal activity of an AI-based system during runtime, they need to peer inside the "black box". AI applications and machine learning pipelines involve highly complex, multi-layered, and non-linear computations. Relying on superficial or external logs won't show you how a model arrived at a decision or where an internal pipeline failure occurred. upvoted 1 times

Selected Answer: D Explanation The question states that the security engineer is primarily concerned about the visibility of internal activity within an AI-based system during runtime operations. Stack calls and debugging-level traces provide detailed visibility into: Function execution paths Internal model interactions Component-to-component communication Error conditions and execution flow Runtime behavior of the application This level of telemetry is essential for understanding what is happening inside the AI system, making it the best choice for monitoring internal operations. upvoted 1 times

Selected Answer: D The security engineer's specific concern is gaining visibility into the internal activity of the AI system during runtime operations.Function-level stack calls and debugging traces log the explicit execution path, variable states, and function arguments inside the application logic. This gives the engineer granular, white-box visibility to see exactly how data flows internally and precisely where a failure, logic bypass, or prompt injection exploit is occurring during runtime. SIEM collects and correlates security events from logs — provides visibility of events, not internal function-level execution details upvoted 1 times

Selected Answer: D The key phrase here is "visibility of internal activity." Stack call and debug-level traces give you the deepest look into what's actually happening inside the AI system at runtime — function calls, execution flow, internal state — which is exactly what you need for that level of observability. upvoted 1 times

Selected Answer: A A SIEM aggregates logs from multiple systems, correlates events, and provides centralized visibility. Best suited for runtime monitoring + internal activity visibility. upvoted 3 times 2c7fd04 4 weeks, 1 day ago For general cybersecurity (perimeter, systems, network traffic), but not for AI systems. D is correct upvoted 1 times ...

Question 2 (Topic 1)

A security operations center (SOC) has a very high volume of logs and alerts. The manager proposes the implementation of machine learning (ML) system to help with triage. Which of the following tasks is most suitable?

Select an option, then click Submit answer.

○ Applying filters on specific alerts
○ Automatically patching vulnerable systems
○ Identifying and classifying alerts
○ Summarizing the content of alerts

Question 3 (Topic 1)

An internal user enters a client credit card number into an internal generative machine learning (ML) model: #User prompt: Customer Jane Doe has a new credit card that she wants to add to her account. The number is 5555-5555-5555-5555 Which of the following is the most effective way to prevent prompt injection attacks against a large language model (LLM)?

Select an option, then click Submit answer.

○ Guardrails
○ Antivirus
○ Web application firewall (WAF)
○ Role-based access control

Free CY0-001 – Comptia CY0-001 Practice Test Question