Parameter Manipulation COASP Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the primary goal of adversarial perturbation as a parameter manipulation technique?

   • ATo delete the model's training data
   • BTo replace the model with a different one
   • CTo encrypt the model's parameters
   • DTo cause the model to misclassify inputs by adding subtle, often imperceptible changes
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which mitigation strategy is most effective for preventing tampering with model hyperparameters stored in a configuration file?

   • AImplementing file integrity monitoring and access controls
   • BEncrypting the model's output
   • CUsing a larger training dataset
   • DIncreasing the model's learning rate
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company uses a predictive maintenance model that takes sensor data as input and has a 'threshold' parameter for alerting. The model is deployed on edge devices that are physically accessible to attackers. An attacker tampers with the device's configuration file to set the threshold to 1.0, meaning alerts are only triggered when the model is 100% confident. What is the most effective mitigation to prevent this type of tampering?

   • ADigitally sign the configuration file and verify the signature at startup on the edge device.
   • BUse a more sensitive model that can detect anomalies even with a high threshold.
   • CStore the configuration file on a remote server and download it at each startup.
   • DEncrypt the configuration file so that attackers cannot read it.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   How can parameter manipulation compromise the integrity of an AI system?

   • ABy making the model more transparent
   • BBy reducing the model's memory usage
   • CBy increasing the model's training speed
   • DBy causing the model to produce outputs that are no longer trustworthy or verifiable
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A financial trading firm uses a predictive model that takes a 'volatility_scale' parameter from a configuration file. The parameter is used to scale the model's output. An attacker modifies the parameter to a very large number, causing the model to output extreme predictions that trigger erroneous trades. The firm's compliance team requires that any change to the parameter be traceable to a specific person. Which control is most aligned with this requirement?

   • AImplement a change management process that requires a ticket and approval before any configuration change.
   • BUse a cryptographic hash of the configuration file and store it in a secure location.
   • CRestrict filesystem access to the configuration file to a single administrator.
   • DEncrypt the configuration file with a key held by the security team.
   Reveal Solution Discussion Select an answer first