CompTIA SecAI+ Practice Questions: 1.0 Basic AI Concepts Related to Cybersecurity

22 free, exam-style CompTIA SecAI+ (CY0-001) practice questions covering 1.0 Basic AI Concepts Related to Cybersecurity, each with the correct answer and an explanation. Start a timed exam below, or scroll on to read through the questions.

🧠

Mini Exam

15 Questions · 30 minutes

Start Quiz 🚀
🏆

Mock SecAI+ Exam

50 Questions · 100 minutes

Start Quiz 🚀
📅

Daily Quiz

10 Questions · 20 minutes

Start Quiz 🚀
🎯

Standard Practice

25 Questions · 50 minutes

Start Quiz 🚀

1.0 Basic AI Concepts Related to Cybersecurity practice questions

Answers and explanations are shown. Take the timed exam above to test yourself first.

Q1. Which of the following AI model training techniques involves training an algorithm across multiple decentralized edge devices or servers holding local data samples, without exchanging them?

  • A.Reinforcement learning
  • B.Federated learning✓ Correct
  • C.Supervised learning
  • D.Transfer learning
Explanation: Federated learning enables multiple entities to collaborate in solving a machine learning problem without sharing their actual private data, only the model updates. Learn more.

Q2. A security analyst is using an AI tool to generate code snippets. To minimize the risk of the model hallucinating or providing insecure code, the analyst provides the model with three specific examples of secure coding patterns before asking for the final output. Which prompt engineering technique is this?

  • A.Zero-shot prompting
  • B.One-shot prompting
  • C.Multi-shot (Few-shot) prompting✓ Correct
  • D.Chain-of-thought prompting
Explanation: Multi-shot (or few-shot) prompting involves providing the model with multiple examples of the desired input-output format to guide its response. Learn more.

Q3. Which component of the Retrieval-Augmented Generation (RAG) architecture is responsible for converting textual data into numerical representations that capture semantic meaning?

  • A.Vector storage
  • B.Embeddings✓ Correct
  • C.Hyperparameters
  • D.System prompt
Explanation: Embeddings are vector representations of data (text) that capture semantic meaning, allowing the system to retrieve relevant context based on similarity. Learn more.

Q4. An organization wants to detect if their proprietary images are being used to train unauthorized external AI models. Which technique should they implement?

  • A.Data sanitization
  • B.Tokenization
  • C.Watermarking✓ Correct
  • D.Pruning
Explanation: Watermarking (specifically digital watermarking/steganography for AI) embeds imperceptible markers in content to track its provenance and unauthorized usage in training sets. Learn more.

Q5. During the AI life cycle, which phase involves 'Human-in-the-loop' to ensure the model aligns with human values and safety guidelines before full automation?

  • A.Data collection
  • B.Model evaluation/Validation✓ Correct
  • C.Deployment
  • D.Decommissioning
Explanation: Human-in-the-loop principles are critical during model evaluation and validation (such as RLHF - Reinforcement Learning from Human Feedback) to ensure safety and alignment. Learn more.

Q6. Which tool is commonly used to package AI applications and their dependencies to ensure consistent deployment across environments?

  • A.Virtual Containers (e.g., Docker)✓ Correct
  • B.Spreadsheets
  • C.Hypervisors only
  • D.VPNs
Explanation: Containers (like Docker) are standard for packaging AI models and applications, ensuring they run consistently regardless of the computing environment. Learn more.

Q7. Which metric is critical to monitor to detect 'Model Drift'?

  • A.Server CPU temperature
  • B.Model accuracy/performance over time✓ Correct
  • C.Network bandwidth usage
  • D.Number of registered users
Explanation: Model drift refers to the degradation of a model's performance over time as real-world data diverges from training data. Monitoring accuracy/performance is key. Learn more.

Q8. To prevent 'Hallucinations' in an AI customer support bot, a company implements a system that grounds the AI's answers strictly in their own knowledge base. This is an implementation of:

  • A.RAG (Retrieval-Augmented Generation)✓ Correct
  • B.GAN (Generative Adversarial Network)
  • C.Unsupervised Learning
  • D.Data Poisoning
Explanation: RAG retrieves relevant facts from a trusted knowledge base and feeds them to the LLM, reducing hallucinations by grounding the response in factual data. Learn more.

Q9. Which validation technique involves removing connections in a neural network to reduce model size and complexity without significantly affecting accuracy?

  • A.Pruning✓ Correct
  • B.Augmentation
  • C.Encryption
  • D.Tokenization
Explanation: Pruning is a model compression technique that removes unnecessary weights (connections) or neurons to make the model lighter and faster. Learn more.

Q10. Which of the following describes 'Quantization' in AI models?

  • A.Increasing the number of parameters to billions
  • B.Reducing the precision of the model's parameters (e.g., from 32-bit float to 8-bit integer) to save memory✓ Correct
  • C.Encrypting the model using quantum cryptography
  • D.Training the model on quantum computers
Explanation: Quantization reduces the precision of the numbers used to represent model parameters, significantly reducing model size and inference time with minimal accuracy loss. Learn more.

Q11. Which type of AI model is specifically designed to generate new content (text, images, audio) based on learned patterns?

  • A.Discriminative AI
  • B.Generative AI✓ Correct
  • C.Linear Regression
  • D.K-Means Clustering
Explanation: Generative AI (GenAI) focuses on creating new data instances that resemble the training data, such as text (LLMs) or images (Diffusion models). Learn more.

Q12. Which control helps ensure that an AI model is not trained on sensitive PII data inadvertently?

  • A.Data Cleansing / Scrubbing✓ Correct
  • B.Data Augmentation
  • C.Increasing Learning Rate
  • D.Model Pruning
Explanation: Data cleansing or scrubbing involves identifying and removing errors, duplicates, and sensitive information (PII) from the dataset before training. Learn more.

Q13. Which of the following is considered a 'Small Language Model' (SLM) typically designed for edge deployment?

  • A.GPT-4
  • B.Claude 3 Opus
  • C.Microsoft Phi-3 / Google Gemma✓ Correct
  • D.Gemini Ultra
Explanation: Models like Microsoft Phi or Google Gemma are designed to be smaller and more efficient (SLMs), capable of running on devices with limited compute (edge). Learn more.

Q14. What is model drift?

  • A.A change in model performance as data patterns change over time✓ Correct
  • B.A network cable moving between ports
  • C.A disk cloning method
  • D.A password reset workflow
Explanation: Model drift occurs when real-world input distributions or relationships change and reduce model accuracy or reliability. Learn more.

Q15. Which metric focuses on the proportion of predicted positive results that were actually positive?

  • A.Precision✓ Correct
  • B.Latency only
  • C.Availability
  • D.Entropy
Explanation: Precision measures true positives divided by all predicted positives. Learn more.

Q16. Which metric focuses on how many actual positive cases the model found?

  • A.Recall✓ Correct
  • B.Packet loss
  • C.RPO
  • D.Uptime
Explanation: Recall measures true positives divided by all actual positives. Learn more.

Q17. Which approach keeps raw training data on local devices while sharing model updates?

  • A.Federated learning✓ Correct
  • B.Static routing
  • C.Full disk imaging
  • D.Screen scraping
Explanation: Federated learning trains across decentralized data sources without centrally collecting the raw data. Learn more.

Q18. What is hallucination in generative AI?

  • A.A plausible but false or unsupported output✓ Correct
  • B.A guaranteed encrypted response
  • C.A firewall drop rule
  • D.A disk sector error
Explanation: Hallucination occurs when a model produces content that appears confident but is not grounded in facts or sources. Learn more.

Q19. Which dataset split is used to tune model choices during development without using the final test set?

  • A.Validation set✓ Correct
  • B.Production logs only
  • C.Backup set
  • D.DNS cache
Explanation: A validation set helps compare and tune models while preserving the test set for final evaluation. Learn more.

Q20. Which technique retrieves trusted documents and provides them to an LLM at answer time?

  • A.Retrieval-augmented generation✓ Correct
  • B.Disk mirroring
  • C.NAT traversal
  • D.Static routing
Explanation: Retrieval-augmented generation grounds model responses with retrieved context from approved sources. Learn more.

Q21. Which concept describes limiting generated answers to approved source material?

  • A.Grounding✓ Correct
  • B.Overclocking
  • C.Subnetting
  • D.Fragmentation
Explanation: Grounding ties outputs to trusted context to reduce unsupported answers. Learn more.

Q22. Which evaluation dataset should remain unused during training and tuning until final assessment?

  • A.Test set✓ Correct
  • B.Training set
  • C.Temporary cache
  • D.DNS zone
Explanation: The test set is reserved for final performance assessment to avoid biased evaluation. Learn more.

More CompTIA SecAI+ practice topics

Keep studying CompTIA SecAI+

Full CompTIA SecAI+ practice exam · CompTIA SecAI+ study guide · All CompTIA practice questions

Last updated