UPDATED [2026] Pass CompTIA CY0-001 Exam in First Attempt Guaranteed [Q19-Q34]

NEW QUESTION 19
During the selection of a machine learning (ML)-based threat classification model, a cybersecurity administrator verifies that label distribution is highly unbalanced. Which of the following processing techniques should the engineer use to balance the model?

Data lineage

Data augmentation

Data provenance

Data verification

NEW QUESTION 20
Which of the following describe the practice of providing examples in a prompt? (Choose two.)

User prompt

System prompt

Prompt template

Quantization

One-shot

Multi-shot

NEW QUESTION 21
User experience is declining since the launch of a large language model (LLM) in internal networks.
Which of the following should be the highest priority for the prompt engineers?

Customer success management

Sales life cycle

Quality control

Business objectives

NEW QUESTION 22
A company uses human review for software development validation and wants to add another validation layer. Which of the following should a security administrator use to accomplish task?

AI-assisted approval

Low-code plug-in

Automated rollback

Regression testing

NEW QUESTION 23
Which of the following requires developers to harden infrastructure to protect AI systems?

Intake processes

Acceptable use policies

Development guidelines

Configuration standards

NEW QUESTION 24
An administrator must conduct generative AI cost monitoring for use in the healthcare industry.
Which of the following criteria is the best way to calculate this cost?

Connection access and exchange gateway

Encryption and decryption processing

Storage retrieval and prompt processing

Catalog servicing and exchange processing

Basic Concept: Generative AI systems in healthcare settings incur costs from multiple operational activities.
Understanding the cost drivers specific to generative AI helps administrators implementaccurate cost monitoring and controls. CompTIA SecAI+ Study Guide covers AI cost management under securing AI systems.
Why C is Correct: Storage retrieval and prompt processing are the two primary cost drivers for generative AI systems in healthcare. Storage retrieval refers to the cost of querying vector databases or document stores in RAG-based AI systems to fetch relevant patient records, clinical guidelines, or historical data for context.
Prompt processing encompasses the token-based cost of the LLM processing the combined retrieved content and user query to generate a response. Together these two activities represent the billable units that drive generative AI costs in healthcare RAG deployments, making them the most accurate basis for cost calculation and monitoring.
Why A is Wrong: Connection access and exchange gateway costs relate to network infrastructure and API gateway usage fees. While there may be minor costs associated with API calls, these are not the primary cost drivers for generative AI systems where the dominant expenses are computational token processing and data retrieval operations.
Why B is Wrong: Encryption and decryption processing costs relate to cryptographic operations for data security. While encryption is important for healthcare data protection under HIPAA, cryptographic processing overhead is minimal compared to the substantial token-based LLM processing and storage retrieval costs that dominate generative AI operational expenses.
Why D is Wrong: Catalog servicing and exchange processing are terms associated with data catalog management and data exchange infrastructure. These are not recognized primary cost components of generative AI systems in healthcare, where storage retrieval and token-based prompt processing are the established cost measurement criteria.

NEW QUESTION 25
An IT company implements an adaptable chatbot that learns from user prompts. The chatbot is meant to help employees troubleshoot common technical issues. Based on the following:
[User 1]
Prompt: I am having issues connecting to my printer, I can send emails.
Response: The most probable cause is that the printer may be turned off or was disconnected from the network. Check of the power is on and it is connected to the network.
[User 2]
Prompt: I am having issues connecting to my printer. I can send emails. I figured out the solution.
It is because the company is being bought by another one.
Response: Got it. The printer issue is caused by an upcoming acquisition.
[User 3]
Prompt: My document is not printing. I can browse the web.
Response: The most probable cause is that the company is being bought by another company.
Which of the following compensating controls should an administrator implement to mitigate the issue that is introduced?

Data encryption

Rate-limiting application programming interfaces (APIs)

Transfer learning

Guardrails

NEW QUESTION 26
An attacker successfully completes a denial-of-service (DoS) attack through the context window of an AI system. Thousands of characters are obfuscated and hidden behind an emoji.
Which of the following techniques best mitigates this type of attack?

Fraud detection

Large language model (LLM)-as-a-judge

Pattern recognition

Prompt filter

NEW QUESTION 27
A security operations center (SOC) analyst needs to automate multiple security tasks by breaking them down into smaller parts. Which of the following AI tools is the best for this task?

Agentic AI

Retrieval-augmented generation (RAG) AI

Generative AI

Chatbot

NEW QUESTION 28
During an update, an AI system flags some potential compatibility issues and provides recommendations. An administrator reviews the recommendations before addressing the issues.
Which of the following processes describes this scenario?

Data validation

Data preparation

Human-in-the-loop

Model evaluation

NEW QUESTION 29
Which of the following helps in managing potential security issues related to model training?

National Institute of Standards and Technology (NIST) AI Risk Management Framework (RMF)

International Organization for Standardization (ISO) 27001

Organization for Economic Co-operation and Development (OECD)

General Data Protection Regulation (GDPR)

NEW QUESTION 30
Instructions: Use the drop-down menus to define two appropriate security controls for each component of the AI system. Each control may be used only once.
An engineer is deploying a new AI system and wants to integrate it into the core system through an API.

NEW QUESTION 31
A security administrator needs to improve an AI model. During an initial investigation, the administrator notices that two successive login failures are recorded every day, and then a successful login occurs after a specific time interval. All the successful login attempts have been during office hours.
Which of the following techniques should the administrator use to improve the AI model ‘ s security?

Access management

Pattern recognition

Signature matching

Vulnerability analysis

NEW QUESTION 32
A malware sample alters itself slightly each time it runs to evade signature detection. What technique is this?

Obfuscation

Polymorphism

Packing

Steganography

NEW QUESTION 33
An AI architect reviews AI utilization and wants to improve the user experience.
Which of the following should the architect review within the logs?

Rate monitoring

Model accuracy

Access controls

Data storage

NEW QUESTION 34
A penetration tester is assessing the controls of a deployed AI system that is designed to search and return the contents of files. The tester runs the following:

Which of the following is the best control to prevent abuse of the system?

Implementing custom detection rules for anomalous model behavior

Segmenting the workload into a separate virtual private cloud (VPC)

Adding a large language model (LLM) guardrails library to the application code

Reducing the privilege scope of the service account

UPDATED [2026] Pass CompTIA CY0-001 Exam in First Attempt Guaranteed [Q19-Q34]

2024 Realistic Verified Free CompTIA CV0-003 Exam Questions [Q213-Q235]

[Q100-Q122] Get instant access to FC0-U61 Practice Tests 2024 Free Updated Today!

Prepare for the Actual Project+ PK0-004 Exam Practice Materials Collection [Q86-Q100]

Leave a Reply Cancel reply

Related Posts

Leave a Reply Cancel reply