An e-commerce company stores its recommendation model's training data in an object storage bucket. A security audit requires that the data be protected against unauthorized access and that any tampering with the data be detectable. Which two controls should the company implement?

Apply a bucket policy that restricts access to specific IP ranges and enable server-side encryption

Enable object versioning and set up alerts for new public access grants

Configure a bucket policy that denies all public access and enable object integrity checks using checksums

Enable bucket-level access logging and versioning

A university research lab stores its training datasets on a shared network drive. They want to ensure that only authorized researchers can access the data and that any changes to the data are logged. Which control should they implement?

Use a checksum to verify data integrity

Encrypt the data with a shared key known to all researchers

Enable file-level access logging and configure permissions to restrict access to the research group

Store the data in a public cloud bucket with a signed URL

A financial services firm has developed a proprietary credit-scoring model and plans to license it to partners. The firm is concerned about partners extracting the model's logic through repeated API queries. Which combination of measures would best mitigate this risk while still allowing legitimate use?

Rate-limit API calls and add noise to responses using differential privacy

Watermark the model and monitor for unauthorized redistribution

Encrypt the model file and require a hardware security module (HSM) for decryption

Use a larger training dataset to make the model more complex

Certified Cloud Security Professional

Domain 2Objective 9

Comprehend Data Protection of Artificial Intelligence (AI) and Machine Learning (ML) Data CCSP Practice Questions (Page 3)

Part of the Cloud Data Security domain, which accounts for 20% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 2–3 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

4concepts

20%of the exam

Questions 11–15

11application · medium
An e-commerce company stores its recommendation model's training data in an object storage bucket. A security audit requires that the data be protected against unauthorized access and that any tampering with the data be detectable. Which two controls should the company implement?
Select an answer first
12foundation · easy
Which type of attack attempts to infer whether a specific individual's data was included in the model's training set?
Select an answer first
13foundation · easy
Which security measure is most directly used to verify that a training data set has not been altered since it was created?
Select an answer first
14application · medium
A university research lab stores its training datasets on a shared network drive. They want to ensure that only authorized researchers can access the data and that any changes to the data are logged. Which control should they implement?
Select an answer first
15expert · hard
A financial services firm has developed a proprietary credit-scoring model and plans to license it to partners. The firm is concerned about partners extracting the model's logic through repeated API queries. Which combination of measures would best mitigate this risk while still allowing legitimate use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.

Comprehend Data Protection of Artificial Intelligence (AI) and Machine Learning (ML) Data CCSP Practice Questions (Page 3)

Questions 11–15

An e-commerce company stores its recommendation model's training data in an object storage bucket. A security audit requires that the data be protected against unauthorized access and that any tampering with the data be detectable. Which two controls should the company implement?

Which type of attack attempts to infer whether a specific individual's data was included in the model's training set?

Which security measure is most directly used to verify that a training data set has not been altered since it was created?

A university research lab stores its training datasets on a shared network drive. They want to ensure that only authorized researchers can access the data and that any changes to the data are logged. Which control should they implement?

Keep studying — Cloud Data Security