How can AI be used to enhance phishing attacks?

By physically delivering letters to victims.

By making emails larger in size to evade filters.

By ensuring emails are sent from the victim's own account.

By generating highly personalized and convincing emails at scale.

An organization deploys an AI-based malware detection system that uses a neural network to classify files as malicious or benign. An attacker wants to make a known malware sample undetectable by the system. Which approach is most likely to succeed?

Compressing the malware file to reduce its size

Renaming the malware file to a benign name

Adding small perturbations to the malware file that cause the neural network to classify it as benign

Encrypting the malware file with a simple XOR cipher

In what way can machine learning enhance a password-cracking attack?

By physically guessing passwords through brute force.

By predicting likely passwords based on patterns from breached data.

By disabling the password hashing algorithm.

By making passwords visible in plain text on the screen.

In a model inversion attack, what does the attacker typically have access to?

The model's hardware and infrastructure.

The model's training logs and hyperparameters.

The model's predictions and some auxiliary information.

The model's source code and training data.

CompTIASecAI+

Domain 1Objective 3

Recognize AI-driven Threats CY0-001 Practice Questions (Page 5)

Part of the Basic AI concepts related to cybersecurity domain, which accounts for 17% of the CY0-001 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

9concepts

17%of the exam

Questions 21–25

21foundation · medium
How can AI be used to enhance phishing attacks?
Select an answer first
22application · medium
An organization deploys an AI-based malware detection system that uses a neural network to classify files as malicious or benign. An attacker wants to make a known malware sample undetectable by the system. Which approach is most likely to succeed?
Select an answer first
23application · medium
A security analyst notices that a new malware variant is generating polymorphic code that changes its structure with each infection, making signature-based detection ineffective. The malware also appears to learn from the environment it infects, adapting its behavior to avoid sandbox detection. Which AI-driven threat characteristic is most directly demonstrated by this malware?
Select an answer first
24foundation · medium
In what way can machine learning enhance a password-cracking attack?
Select an answer first
25foundation · medium
In a model inversion attack, what does the attacker typically have access to?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CY0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CY0-001” is a trademark of its owner, used for identification only.