CAIC Cybersecurity & Risk 2

Question 1

Which attack vector specifically targets the training data of an AI model to degrade its performance or introduce malicious behavior?

Accepted Answer

Data poisoning

Answer

Data poisoning corrupts training data to manipulate model outputs or degrade accuracy.

Question 2

An AI system used for loan approvals is found to systematically deny applications from a protected demographic. Which risk category best describes this?

Accepted Answer

Algorithmic bias risk

Answer

Algorithmic bias risk covers discriminatory outcomes embedded in model outputs affecting protected groups.

Question 3

What is the primary purpose of an AI model's threat model during the risk assessment phase?

Accepted Answer

To identify assets, adversaries, and attack surfaces relevant to the AI system

Answer

A threat model maps the assets, potential adversaries, and attack surfaces to guide security controls.

Question 4

A prompt injection attack against an LLM-powered customer service bot successfully makes it reveal internal system instructions. Which control would most directly mitigate this?

Accepted Answer

Implementing output filtering and strict prompt sandboxing

Answer

Output filtering and prompt sandboxing limit the model's ability to expose sensitive instructions or be manipulated via crafted inputs.

Question 5

Under NIST AI RMF, which function focuses on detecting adverse events or anomalies in an AI system's behavior?

Accepted Answer

Measure

Answer

The Measure function in NIST AI RMF focuses on analyzing and monitoring AI risks, including detecting anomalies.

(CAIC) Certified AI Consultant Practice Test

(CAIC) Certified AI Consultant Practice Test

CAIC Cybersecurity & Risk 2