Secure AI Deployment Environments CY0-001 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which access control mechanism is most appropriate for a data scientist who needs to run experiments on a deployed AI model but should not modify the model itself?

   • AGranting the data scientist full administrative rights
   • BDenying all access to the AI environment
   • CSharing the model's private key with the data scientist
   • DProviding read-only access to the model and write access to the experiment workspace
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is a best practice for patch management in an AI deployment environment?

   • AOnly patching the AI model itself
   • BDisabling automatic updates to avoid downtime
   • CApplying patches immediately without testing
   • DTesting patches in a staging environment before production
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has deployed an AI model that provides real-time fraud detection. The security team wants to detect anomalies in the model's behavior, such as unusual input patterns or unexpected output changes, and also wants to ensure that only authorized personnel can access the model's logs. Which combination of controls BEST addresses these needs?

   • AEnable detailed logging of all model inputs and outputs, and set up alerts for anomalous patterns. Restrict log access to the security operations team using role-based access control (RBAC).
   • BImplement a patch management schedule for the model server and ensure all software is up to date.
   • CEncrypt the model's output data and store it in a separate database, but do not log inputs to reduce storage costs.
   • DUse a network firewall to block external traffic to the model, and rely on the cloud provider's default monitoring for all instances.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a key component of an incident response plan?

   • AGranting all users administrative access during an incident
   • BDisabling all logging to prevent evidence tampering
   • CDefining roles and responsibilities of the response team
   • DDeleting all backups to free up space
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary purpose of implementing role-based access control (RBAC) in an AI deployment environment?

   • ATo encrypt data at rest
   • BTo monitor network traffic
   • CTo grant users access based on their job responsibilities
   • DTo ensure the AI model runs faster
   Reveal Solution Discussion Select an answer first