A security vendor trains an AI malware detector on a large dataset of benign and malicious files. An attacker wants to make the detector classify a specific malicious file as benign at inference time. The attacker has no access to the model's training data or parameters. Which attack is most likely to succeed?

Performing a model inversion attack to reconstruct the training data

Crafting an adversarial example using a substitute model and relying on transferability

Using a white-box gradient-based attack on the target model

Injecting a backdoor into the training data

GIAC AI Security Automation Engineer

Domain 3Objective 1

Artificial Intelligence Fundamentals GASAE Practice Questions (Page 8)

Part of the AI and Adversary Emulation domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~13–23 in this domain), expect 7–12 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

5concepts

Questions 36–36

36expert · hard
A security vendor trains an AI malware detector on a large dataset of benign and malicious files. An attacker wants to make the detector classify a specific malicious file as benign at inference time. The attacker has no access to the model's training data or parameters. Which attack is most likely to succeed?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GASAE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GASAE” is a trademark of its owner, used for identification only.

Artificial Intelligence Fundamentals GASAE Practice Questions (Page 8)

Questions 36–36

Keep studying — AI and Adversary Emulation