CY0-001無料問題集「CompTIA SecAI+ Certification」

質問 1

Which of the following describes the most significant risk associated with AI agents that make autonomous decisions?

（A）Accidental data leakage

（B）Output bias

（C）Overfitting

（D）Increased workload

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

A human resources officer is using AI to evaluate resumes and help select candidates that meet minimum criteria. To improve the results, the human resources officer adjusts the query parameters and includes an example resume that matches a successful candidate.
Which of the following best describes this query?

（A）Prompt template

（B）Distillation

（C）One-shot prompting

（D）System role

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

A security administrator wants to prevent prompt injection attacks and ensure responses have sanitized output.
Which of the following provides a primary compensating control for these requirements?

（A）Encryption

（B）Least privilege

（C）Rate limiting

（D）A large language model (LLM) firewall

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

A penetration tester is assessing the controls of a deployed AI system that is designed to search and return the contents of files.
The tester runs the following:

Which of the following is the best control to prevent abuse of the system?

（A）Reducing the privilege scope of the service account

（B）Segmenting the workload into a separate virtual private cloud (VPC)

（C）Adding a large language model (LLM) guardrails library to the application code

（D）Implementing custom detection rules for anomalous model behavior

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

A cybersecurity administrator generates patching reports using AI, but the process takes a long time. Which of the following is the best way to increase performance?

（A）Have the AI download the full CVE database first to prevent multiple similar external queries.

（B）Configure the AI system prompt to specify summarization algorithms.

（C）Increase the amount of model tokens available to eliminate time-consuming session restarts.

（D）Deploy a Model Context Protocol (MCP) server to delegate several versions of this query to the back- end LLM simultaneously.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Which of the following best describes the risk of too many epochs on the same data?

（A）Overfitting of the model

（B）Insufficient monitoring of system usage

（C）Inability to perform unit testing

（D）Unpredictability of returned outputs

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

An organization develops a chatbot that does not provide harmful or explicit responses, must use clean and professional language, and ensures that responses are accurate.
Which of the following should the organization conduct after the chatbot is fully developed but before a customer-facing deployment?

（A）Guardrail testing and validation

（B）Model auditing and evaluation

（C）Data labeling and classification

（D）Regression modeling and minimization

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Which of the following strengthens the performance of a large language model (LLM) for malicious reconnaissance?

（A）Creating a web scraper script using AI to capture the company website

（B）Prompting a chatbot to describe server naming patterns and Internet Protocol (IP) ranges

（C）Instructing an AI assistant to query as an administrator

（D）Enhancing a foundational model with the inclusion of retrieval-augmented generation (RAG)

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

An analyst wants to develop a solution to review security information and event management (SIEM) logs for endpoint analytics. Which of the following is a benefit of a small language model (SLM) compared to a large language model (LLM) when cost efficiency is a consideration?

（A）Broad data set training

（B）Data aggregation

（C）Data privacy

（D）Domain-specific data

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

A security architect performs threat modeling of an AI system. The architect needs to determine which attacks can be performed against the system.
Which of the following actions should the architect take next?

（A）Identify trust boundaries and perform threat modeling with Open Worldwide Application Security Project (OWASP) Top 10.

（B）Analyze MITRE Adversarial Threat Landscape for AI Systems (ATLAS) for tactics, techniques, and procedures (TTPs).

（C）Leverage a large language model (LLM) to map likely attack paths based on the code base.

（D）Quantify the risk of known vulnerabilities identified in the AI system.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

An organization implements a domain-specific AI chatbot. After operating normally for weeks, the model returns contextually incorrect responses - treating ' worm ' as a biological pest rather than a computer worm when answering a cybersecurity question.
Which of the following should the organization do to address the issue?

（A）Encrypt the weights at rest.

（B）Configure guardrails.

（C）Deploy prompt templates.

（D）Apply model access controls.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

An administrator must conduct generative AI cost monitoring for use in the healthcare industry.
Which of the following criteria is the best way to calculate this cost?

（A）Encryption and decryption processing

（B）Catalog servicing and exchange processing

（C）Storage retrieval and prompt processing

（D）Connection access and exchange gateway

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

During a model validation procedure, an engineer notices that a model performs well during training but poorly during testing.
Which of the following best describes the reason?

（A）Fine-tuning

（B）Regularization

（C）Overfitting

（D）Inference

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

CY0-001 無料問題集「CompTIA SecAI+ Certification」

弊社を連絡する

関連リンク

トップ試験