Secure AI Deployment Environments CY0-001 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is deploying a machine learning model that is used for credit scoring. The model is deployed in a production environment, and the security team wants to ensure that the model's configuration is secure and that any changes are properly managed. The team also wants to ensure that only authorized personnel can make changes to the model's configuration. Which combination of practices is MOST effective?

   • AUse a manual process for configuration changes, and document the changes in a shared document after they are made.
   • BUse a configuration management database (CMDB) to track all configuration items, and implement a change management process that requires approval for any changes.
   • CImplement a role-based access control (RBAC) system that grants all data scientists full access to the production configuration.
   • DUse a version control system for the model's code, but do not track the configuration settings.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of performing a security review of an AI model before it is deployed to production?

   • ATo identify and mitigate potential vulnerabilities in the model and its deployment environment
   • BTo reduce the size of the model for faster inference
   • CTo ensure the training data is labeled correctly
   • DTo improve the model's prediction accuracy
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A multinational corporation is deploying an AI system that processes personal data of users in the European Union. The company must comply with the General Data Protection Regulation (GDPR). Which of the following is a REQUIRED measure to ensure GDPR compliance for the AI deployment?

   • AEnsure that all personal data used by the AI system is stored and processed within the EU.
   • BObtain explicit consent from every individual whose data is processed by the AI system.
   • CImplement a data protection impact assessment (DPIA) for the AI system's processing activities.
   • DEncrypt all personal data at rest and in transit using the strongest available encryption algorithms.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security analyst is reviewing the monitoring logs for an AI model that classifies loan applications. The analyst notices that the model's output distribution has shifted significantly over the past week, and there is an unusual number of requests from a single IP address. What is the MOST appropriate immediate action for the analyst to take?

   • AInvestigate the IP address and the model's behavior to determine if this is a security incident or a legitimate change in usage patterns.
   • BRestart the model server to reset the model's state and clear the logs.
   • CBlock the IP address immediately to prevent further requests, and then review the logs.
   • DIgnore the anomaly because the model is still producing outputs, and continue monitoring.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A global company is deploying an AI system that processes personal data of users in multiple countries, including the European Union (EU) and the United States. The company must comply with GDPR and other data protection regulations. The company is considering using a cloud provider that has data centers in both the EU and the US. Which of the following is the BEST approach to ensure compliance?

   • AStore and process all EU user data in the EU data center, and implement appropriate safeguards for any data transferred to the US.
   • BStore all data in the US data center, and rely on the cloud provider's privacy policies to ensure compliance.
   • CUse a single data center in a third country that is not subject to GDPR, and argue that the data is not protected by GDPR.
   • DEncrypt all data at rest and in transit, and assume that encryption alone ensures GDPR compliance.
   Reveal Solution Discussion Select an answer first