CAIC Network Security & Protocols 2

Question 1

An AI system needs to securely transmit model inference requests between microservices. Which protocol provides mutual authentication and encryption at the transport layer?

Accepted Answer

mTLS (mutual TLS)

Answer

mTLS requires both client and server to present certificates, providing mutual authentication and encrypted communication between microservices.

Question 2

Which attack vector exploits the way AI APIs handle oversized JSON payloads to cause denial-of-service conditions?

Accepted Answer

JSON bomb (billion laughs)

Answer

A JSON bomb uses deeply nested or recursive structures that expand exponentially during parsing, exhausting server memory and causing DoS.

Question 3

A Certified AI Consultant recommends network segmentation for an AI training cluster. What is the PRIMARY security benefit?

Accepted Answer

Limiting lateral movement if a node is compromised

Answer

Network segmentation contains breaches by preventing attackers who compromise one node from freely accessing other systems on the network.

Question 4

Which DNS security extension prevents cache poisoning attacks that could redirect AI API traffic to malicious servers?

Accepted Answer

DNSSEC

Answer

DNSSEC uses cryptographic signatures to validate DNS responses, preventing attackers from injecting forged DNS records.

Question 5

An AI platform uses WebSockets for real-time model streaming. Which security header is MOST important to prevent unauthorized cross-origin WebSocket connections?

Accepted Answer

Origin validation on the server side

Answer

WebSocket upgrades bypass CORS, so servers must explicitly validate the Origin header to reject connections from unauthorized domains.

(CAIC) Certified AI Consultant Practice Test

(CAIC) Certified AI Consultant Practice Test

CAIC Network Security & Protocols 2