Implement Security Controls CY0-001 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the main goal of patch management for AI system components?

   • ATo reduce the size of the AI model
   • BTo provide training data for the AI model
   • CTo apply security updates and fixes to protect against known vulnerabilities
   • DTo increase the speed of the AI model's inference
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company's AI system must comply with industry regulations that require regular audits. The audit team has limited resources and must prioritize which controls to audit. The company has identified that access control and model integrity are the highest risks. Which audit approach is most effective?

   • AAudit all controls equally regardless of risk.
   • BConduct a risk-based audit that focuses on access control and model integrity controls.
   • CAudit only the controls that are easiest to test.
   • DPerform a single comprehensive audit at the end of the year.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which phase of the incident response lifecycle involves actions to limit the damage of a security breach?

   • ADetection
   • BContainment
   • CPreparation
   • DRecovery
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which activity is a key part of an AI system security audit?

   • AEncrypting the AI model's weights
   • BReviewing access logs and permissions
   • CTraining the AI model on new data
   • DDeploying the AI model to production
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A multinational corporation has an AI system that is accessed by employees in different regions. The security team must enforce least privilege access, but the HR department needs to temporarily grant elevated access to a data scientist for a specific project. The compliance team requires that all access changes be logged and reviewed. Which approach best balances security and operational needs?

   • AImplement a role-based access control system with temporary role assignments that expire automatically and are logged.
   • BCreate a new user account for the data scientist with elevated access for the project.
   • CGrant the data scientist permanent elevated access to avoid delays.
   • DUse a shared elevated account for the project team.
   Reveal Solution Discussion Select an answer first