AI Reconnaissance and Attack Surface Mapping COASP Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   You are performing OSINT on a company that uses a machine learning platform. You find a public presentation from a conference where a data scientist discusses the company's model architecture. What is the most valuable piece of information you can extract from this presentation?

   • AThe names of the data science team members.
   • BThe conference's Wi-Fi password.
   • CThe company's marketing strategy for the AI product.
   • DThe exact model architecture and framework versions used in production.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   You have mapped an AI system's attack surface and identified the following potential attack vectors: prompt injection on the public chatbot, adversarial examples on the image classifier, and model inversion on the recommendation engine. Which of the following best describes the final step in the attack surface mapping methodology?

   • AImmediately exploit the most critical vulnerability to demonstrate impact.
   • BPrioritize the identified attack vectors based on likelihood and impact, and document them in a risk register.
   • CDelete all reconnaissance data to avoid legal liability.
   • DShare the raw reconnaissance data with all employees to increase awareness.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is the goal of model fingerprinting in AI reconnaissance?

   • ATo replace the model with a malicious version
   • BTo extract the training data used to build the model
   • CTo identify the architecture, framework, and version of a target AI model
   • DTo disrupt the model's availability by sending excessive requests
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   What is the purpose of API and endpoint discovery in AI reconnaissance?

   • ATo measure the model's accuracy on a test set
   • BTo identify the network-accessible interfaces that expose AI functionality
   • CTo extract the training data from the model
   • DTo determine the internal database schema of the AI system
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which of the following is a component of an AI attack surface?

   • AThe brand logo used in the user interface
   • BThe training dataset used to build the model
   • CThe company's marketing strategy
   • DThe organization's employee handbook
   Reveal Solution Discussion Select an answer first