What is the main purpose of conducting regular audits of an AI system?

To increase the speed of the AI model

To provide training data for the AI model

To verify that the system complies with security policies and standards

An e-commerce company uses an AI recommendation system. The security team wants to detect anomalies such as unusual access patterns or data exfiltration attempts. They also need to be able to respond quickly to incidents. What should they implement?

Implement strict access control policies for the AI system.

Perform a penetration test once a year.

Enable comprehensive logging of all system events and integrate with a SIEM for real-time alerting.

Conduct regular backups of the AI model and data.

A company's AI system has been compromised. The incident response team is activated. The team must determine the scope of the breach, contain it, and preserve evidence for potential legal action. Which sequence of actions is most appropriate?

Notify law enforcement before taking any action.

Analyze the logs first, then isolate the systems.

Restore from backup immediately, then investigate.

Isolate the affected systems, collect forensic evidence, and then analyze the logs.

Which of the following is a common output of a threat modeling exercise?

An encryption key for the AI system

A list of identified threats and corresponding mitigation strategies

A backup of the AI system's data

A healthcare organization's AI system has been breached. The incident response team needs to contain the breach, eradicate the threat, and recover the system. Which step should be performed FIRST in the incident response process?

Restore the AI system from the latest backup.

Isolate the affected systems to prevent further spread of the breach.

Notify law enforcement immediately.

CompTIASecAI+

Domain 2Objective 1

Implement Security Controls CY0-001 Practice Questions (Page 5)

Part of the Securing AI systems domain, which accounts for 40% of the CY0-001 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~10–16 in this domain), expect 3–5 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

10concepts

40%of the exam

Questions 21–25

21foundation · easy
What is the main purpose of conducting regular audits of an AI system?
Select an answer first
22application · medium
An e-commerce company uses an AI recommendation system. The security team wants to detect anomalies such as unusual access patterns or data exfiltration attempts. They also need to be able to respond quickly to incidents. What should they implement?
Select an answer first
23expert · hard
A company's AI system has been compromised. The incident response team is activated. The team must determine the scope of the breach, contain it, and preserve evidence for potential legal action. Which sequence of actions is most appropriate?
Select an answer first
24foundation · easy
Which of the following is a common output of a threat modeling exercise?
Select an answer first
25application · medium
A healthcare organization's AI system has been breached. The incident response team needs to contain the breach, eradicate the threat, and recover the system. Which step should be performed FIRST in the incident response process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CY0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CY0-001” is a trademark of its owner, used for identification only.