Objective 3.5 Identify and Mitigate Safety and Security Risks CERTIFIED-ETHICAL-EMERGING-TECHNOLOGIST Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which tool is specifically designed to actively exploit vulnerabilities in a system to determine the real-world impact of a security weakness?

   • ASIEM system
   • BPenetration testing framework
   • CVulnerability scanner
   • DFirewall
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A manufacturing company has deployed an AI-based quality-control system on its production line. The security team suspects that an attacker may have tampered with the model's training data. They want to identify whether the model's behavior has been maliciously altered. Which tool or technique is most appropriate for this investigation?

   • AConduct a risk assessment to evaluate the likelihood of a data-tampering attack on the training pipeline.
   • BPerform a vulnerability scan of the servers hosting the training data to identify known software weaknesses.
   • CRun a penetration testing framework against the AI system's API to check for authentication bypass vulnerabilities.
   • DReview the SIEM logs for unusual access patterns to the training data storage and compare model outputs against a baseline.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A software company is developing a new AI-powered code review tool. The security team wants to identify vulnerabilities in the tool's web interface before release. Which tool is most appropriate for this task?

   • AA threat model that maps potential attack vectors against the web interface.
   • BA SIEM system to aggregate and analyze logs from the development environment.
   • CA penetration testing framework such as OWASP ZAP or Burp Suite to test the web interface for common vulnerabilities.
   • DA vulnerability scanner that checks the underlying operating system for missing patches.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A security operations team needs a tool that can aggregate and correlate security logs from multiple sources to detect and respond to incidents in real time. Which tool is most appropriate for this purpose?

   • ASIEM system
   • BVulnerability scanner
   • CPenetration testing framework
   • DIntrusion detection system (IDS)
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A bank is deploying an AI system to approve small business loans. The system uses customer financial data and external credit scores. The bank's compliance team is concerned about the risk of biased decisions that could lead to regulatory penalties. Which method is most appropriate to identify this risk before the system goes live?

   • AImplement a defense-in-depth strategy by adding multiple authentication layers to the loan system.
   • BRun a vulnerability scanner against the loan application database to find SQL injection flaws.
   • CDeploy a SIEM system to monitor the loan approval system for unusual access patterns.
   • DConduct a risk assessment that evaluates the likelihood and impact of biased outcomes on protected groups.
   Reveal Solution Discussion Select an answer first