AI Attack Surfaces, Threat Landscapes, and Adversary Techniques (MITRE ATLAS-aligned) COASP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In a real-world attack, an attacker submitted specially crafted images to a facial recognition system that caused it to misidentify individuals. Which attack surface and technique were exploited?

   • APipeline attack surface; model inversion
   • BModel attack surface; adversarial examples
   • CData attack surface; data poisoning
   • DDeployment attack surface; denial of service
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security analyst discovers that an attacker has been submitting crafted inputs to a fraud-detection model, causing it to misclassify fraudulent transactions as legitimate. The analyst wants to document this in a structured way using MITRE ATLAS. Which ATLAS tactic and technique pair best describes this activity?

   • AExfiltration via ML Model Inference
   • BML Model Evasion via Adversarial Inputs
   • CInitial Access via Valid Accounts
   • DImpact via Cost to Organization
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a technique under the 'ML Model Inference' tactic in MITRE ATLAS?

   • AModel Inversion
   • BSupply Chain Compromise
   • CData Poisoning
   • DDenial of Service
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A red team is documenting a multi-stage attack: they first used a public vulnerability in a model-serving library to gain remote code execution, then used that access to query the model extensively and reconstruct its decision boundary. Which pair of ATLAS tactics and techniques best describes the two stages?

   • AEvasion via Adversarial Inputs; Exfiltration via Exfiltration Over C2 Channel
   • BInitial Access via Exploit Public-Facing Application; Collection via ML Model Inference
   • CDiscovery via Model Inference; Impact via Cost to Organization
   • DInitial Access via Valid Accounts; Impact via Data Poisoning
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In MITRE ATLAS, what is the purpose of the 'tactics' column?

   • ATo describe the vulnerabilities in AI systems
   • BTo provide mitigation strategies
   • CTo represent the high-level goals of an adversary
   • DTo list specific tools used by attackers
   Reveal Solution Discussion Select an answer first