A security team uses an AI-based network intrusion detection system (NIDS) that relies on a machine learning model to identify malicious traffic. An attacker wants to evade detection while performing a port scan. Which technique would be most effective?

Encrypting the port scan traffic

Using a distributed port scan from multiple IP addresses

Crafting packets that are misclassified as benign by the ML model

Slowing down the port scan to avoid triggering rate-based alerts

An organization's AI-based endpoint detection and response (EDR) system uses a model to classify processes as malicious or benign. An attacker wants to run a malicious process without detection. Which evasion technique is most likely to succeed?

Modifying the process's behavior to mimic benign patterns

Using a process name that is commonly used by legitimate software

Running the process in a virtual machine

What is a key advantage of AI-driven phishing over traditional phishing?

It can automatically adapt messages based on user responses.

It requires more human intervention.

It always uses the same template for all targets.

It is slower and more deliberate.

What is the purpose of an evasion technique in the context of AI-based security?

To overload the AI system with traffic.

To steal the AI system's training data.

To improve the AI system's detection accuracy.

To avoid detection by the AI system.

CompTIASecAI+

Domain 1Objective 3

Recognize AI-driven Threats CY0-001 Practice Questions (Page 4)

Part of the Basic AI concepts related to cybersecurity domain, which accounts for 17% of the CY0-001 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

9concepts

17%of the exam

Questions 16–20

16expert · hard
A security team uses an AI-based network intrusion detection system (NIDS) that relies on a machine learning model to identify malicious traffic. An attacker wants to evade detection while performing a port scan. Which technique would be most effective?
Select an answer first
17application · medium
An organization's AI-based endpoint detection and response (EDR) system uses a model to classify processes as malicious or benign. An attacker wants to run a malicious process without detection. Which evasion technique is most likely to succeed?
Select an answer first
18foundation · medium
What is a key advantage of AI-driven phishing over traditional phishing?
Select an answer first
19application · medium
A healthcare organization uses a machine learning model to predict patient diagnoses based on medical records. A researcher wants to determine whether a specific individual's data was used in the training set. Which attack would allow the researcher to infer this information?
Select an answer first
20foundation · medium
What is the purpose of an evasion technique in the context of AI-based security?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CY0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CY0-001” is a trademark of its owner, used for identification only.