CY0-001 Practice Test

CY0-001 Practice Test practice questions, page 4 of 5, with answer review and explanations.

Question 16

An attacker successfully completes a denial-of-service (DoS) attack through the context window of an AI system. Thousands of characters are obfuscated and hidden behind an emoji. Which of the following techniques best mitigates this type of attack?

  1. Fraud detection
  2. Large language model (LLM)-as-a-judge
  3. Pattern recognition
  4. Prompt filter

Question 17

An AI architect reviews AI utilization and wants to improve the user experience. Which of the following should the architect review within the logs?

  1. Rate monitoring
  2. Model accuracy
  3. Access controls
  4. Data storage

Question 18

A human resources officer is using AI to evaluate resumes and help select candidates that meet minimum criteria. To improve the results, the human resources officer adjusts the query parameters and includes an example resume that matches a successful candidate. Which if the following best describes this query?

  1. Distillation
  2. Prompt template
  3. One-shot prompting
  4. System role

Question 19

A line of business wants to onboard an application that uses a custom AI model for employee assessments. The Chief Information Officer (CIO) agrees to allow the engagement to proceed but first wants a threat model. Which of the following is the most appropriate to use for an AI threat model?

  1. Responsible AI
  2. Adversarial Threat Landscape for AI Systems (ATLAS)
  3. Organization for Economic Co-operation and Development (OECD)
  4. International Organization for Standardization (ISO)

Question 20

A security analyst finds that the AI system is under a denial-of-wallet attack. Which of the following should the analyst enforce to protect the company? (Choose two.)

  1. Endpoint access controls
  2. Content delivery network (CDN)
  3. Model fine-tuning
  4. Modality controls
  5. Application programming interface (API) rate controls
  6. Output token controls