Secure AI Deployment Environments CY0-001 Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A security team is responsible for monitoring an AI system that processes financial transactions. The team has implemented logging, but they are concerned that the logs themselves could be tampered with by an attacker who gains access to the system. Which of the following is the BEST way to protect the integrity of the logs?

   • AUse a log rotation policy that deletes logs older than 30 days to reduce storage costs.
   • BStore the logs in a database that is accessible to all administrators for easy review.
   • CSend the logs to a remote, write-once, read-many (WORM) storage system that prevents modification or deletion.
   • DEncrypt the logs with a key that is stored on the same server as the logs.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the primary purpose of encrypting data at rest in an AI deployment environment?

   • ATo protect data stored on disk or in databases from unauthorized access
   • BTo speed up model inference
   • CTo allow multiple users to access the same data
   • DTo ensure data is not modified during transmission
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   An organization runs a machine learning platform in a production environment. The security team has identified a critical vulnerability in the underlying operating system that could allow remote code execution. The organization also has a strict change management policy that requires all production changes to be approved by a change advisory board (CAB). What is the BEST course of action to address the vulnerability while adhering to the change management policy?

   • AImplement a workaround, such as a firewall rule, to mitigate the vulnerability, and defer the patch until the next CAB meeting.
   • BWait for the next scheduled maintenance window to apply the patch, even if it is several weeks away, to follow the standard change management process.
   • CApply the security patch immediately to all production servers, and document the action after the fact to comply with the change management policy.
   • DDisable the affected service temporarily until the patch can be applied through the normal change process.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which security practice is most directly associated with the deployment phase of an AI system's lifecycle?

   • APerforming regular backups of the training dataset
   • BHardening the runtime environment and validating the model before release
   • CDesigning the neural network architecture
   • DCollecting new training data from production users
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Which of the following is a common technique used to isolate an AI deployment environment?

   • AUsing a shared development environment for all teams
   • BPlacing the AI system in a separate virtual network with strict access controls
   • CDeploying the AI model on the same server as the corporate email server
   • DGranting all employees administrative access to the AI system
   Reveal Solution Discussion Select an answer first