CAIC Cybersecurity & Risk 3

Question 1

What does 'model inversion attack' allow an adversary to do?

Accepted Answer

Reconstruct approximate training data from model outputs

Answer

Model inversion attacks exploit query access to infer or reconstruct sensitive training data from model responses.

Question 2

Which of the following is a key principle of 'privacy by design' as applied to AI systems?

Accepted Answer

Embedding privacy controls proactively into system architecture from the start

Answer

Privacy by design requires integrating data protection mechanisms during the design phase, not as an afterthought.

Question 3

A financial institution's AI fraud detection model begins performing poorly six months after deployment due to changing fraud patterns. This is an example of:

Accepted Answer

Model drift

Answer

Model drift occurs when real-world data distributions shift from the training distribution, degrading performance over time.

Question 4

Which control specifically addresses the risk that a third-party pre-trained model contains a hidden backdoor triggered by a specific input pattern?

Accepted Answer

Model provenance verification and red-team testing

Answer

Verifying model provenance and conducting adversarial red-team testing help detect backdoors embedded in third-party models.

Question 5

In the context of AI risk, 'explainability' is important for cybersecurity because:

Accepted Answer

It allows security teams to understand and audit why a model flagged or missed a threat

Answer

Explainability enables security analysts to audit AI-driven decisions, identify errors, and detect manipulation or bias.

(CAIC) Certified AI Consultant Practice Test

(CAIC) Certified AI Consultant Practice Test

CAIC Cybersecurity & Risk 3