A company is deploying a new AI model to production. The security team wants to ensure that the model's configuration is consistent and secure across all environments, and that any changes to the configuration are tracked and approved. Which approach BEST meets these requirements?

Manually configure each environment to ensure the model works correctly, and document the configuration in a shared spreadsheet.

Create a golden image of the model's environment and deploy it to all environments, but allow developers to modify the image as needed.

Use infrastructure as code (IaC) to define the model's deployment configuration, and store the configuration in a version control system with a review process for changes.

Use a configuration management tool to push the same configuration to all environments, but do not track changes to the configuration.

What is the purpose of segmenting the network that hosts an AI deployment environment?

To limit the spread of a security breach and reduce the attack surface

To make the AI model accessible to the public

To reduce the need for encryption

To increase the model's accuracy

A healthcare organization is deploying an AI model that processes patient data. The organization must comply with regulations that require data to be encrypted in transit and at rest. The organization also has a requirement to be able to revoke access to the data immediately if a data breach is suspected. Which encryption approach BEST meets these requirements?

Use a network-level encryption solution, such as IPsec, for all data transfers, and rely on the database's native encryption for data at rest.

Use server-side encryption with a cloud provider-managed key, and rely on the provider to revoke access when notified.

Use envelope encryption with a customer-managed key, and store the key in a hardware security module (HSM) that allows immediate key revocation.

Encrypt the data with a static key that is stored in the application's configuration file, and change the key periodically.

CompTIASecAI+

Domain 2Objective 2

Secure AI Deployment Environments CY0-001 Practice Questions (Page 1)

Part of the Securing AI systems domain, which accounts for 40% of the CY0-001 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~10–16 in this domain), expect 3–5 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

10concepts

40%of the exam

Questions 1–5

1foundation · easy
Which encryption technique is used to protect data while it is being transmitted between an AI application and its users?
Select an answer first
2application · medium
A company is deploying a new AI model to production. The security team wants to ensure that the model's configuration is consistent and secure across all environments, and that any changes to the configuration are tracked and approved. Which approach BEST meets these requirements?
Select an answer first
3foundation · easy
What is the purpose of segmenting the network that hosts an AI deployment environment?
Select an answer first
4expert · hard
A healthcare organization is deploying an AI model that processes patient data. The organization must comply with regulations that require data to be encrypted in transit and at rest. The organization also has a requirement to be able to revoke access to the data immediately if a data breach is suspected. Which encryption approach BEST meets these requirements?
Select an answer first
5foundation · easy
Which network security measure is commonly used to control inbound and outbound traffic to an AI deployment environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CY0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CY0-001” is a trademark of its owner, used for identification only.

Secure AI Deployment Environments CY0-001 Practice Questions (Page 1)

Questions 1–5

Which encryption technique is used to protect data while it is being transmitted between an AI application and its users?

A company is deploying a new AI model to production. The security team wants to ensure that the model's configuration is consistent and secure across all environments, and that any changes to the configuration are tracked and approved. Which approach BEST meets these requirements?

What is the purpose of segmenting the network that hosts an AI deployment environment?

Which network security measure is commonly used to control inbound and outbound traffic to an AI deployment environment?

Keep studying — Securing AI systems