CY0-001 CompTIA SecAI+ v1 Exam Free Practice Exam Questions (2026 Updated)

Basic Concept: Data at rest refers to inactive data stored in databases or storage media. Protecting it from unauthorized disclosure is a fundamental data security principle covered in the CompTIA SecAI+ Study Guide under securing AI data pipelines.

Why C is Correct: Encryption protects data at rest by rendering it unreadable to unauthorized parties without the appropriate decryption key. In a financial institution with sensitive data, encryption at rest (e.g., AES-256) is the primary control against data disclosure. Even if storage media is physically compromised, encrypted data remains unintelligible. CompTIA SecAI+ Exam Objectives highlight encryption as the primary confidentiality control for stored AI data.

Why A is Wrong: Data lineage tracks the origin and movement of data throughout its lifecycle. It improves traceability and auditability but does not prevent unauthorized disclosure of data at rest.

Why B is Wrong: Rate limits control the number of API requests within a time period. They protect against abuse and denial-of-service scenarios, not data-at-rest confidentiality.

Why D is Wrong: Data masking replaces sensitive values with fictitious substitutes, useful during development or testing. For actual production data at rest in AI systems handling real financial records, encryption provides stronger and more comprehensive confidentiality.

Basic Concept: Before deploying an AI chatbot that has specific behavioral requirements — no harmful content, professional language, and accurate responses — organizations must verify that the controls designed to enforce these requirements actually work as intended. This pre-deployment verification is essential for customer-facing systems. CompTIA SecAI+ Study Guide covers guardrail testing as a required pre-deployment activity.

Why C is Correct: Guardrail testing and validation specifically verifies that the content filtering, safety controls, and behavioral constraints implemented in the chatbot function correctly before customer exposure. This involves systematically testing with edge cases, adversarial prompts, and boundary conditions to confirm that harmful content is blocked, language remains professional, and responses are accurate. This directly validates the three requirements stated in the question.

Why A is Wrong: Data labeling and classification is a data preparation activity performed during model training and development. By the time the chatbot is fully developed, this work should already be complete.

Why B is Wrong: Model auditing and evaluation assesses overall model performance, accuracy, and compliance at a broader level. While important, it does not specifically verify that the guardrails enforcing the three behavioral requirements work correctly for the specific failure modes customers might trigger.

Why D is Wrong: Regression modeling and minimization refers to statistical techniques for continuous outcome prediction. This is not a relevant pre-deployment activity for a conversational chatbot requiring behavioral safety validation.

Basic Concept: AI systems used in employment contexts such as job screening carry significant regulatory risk. For a multinational company operating in or serving markets covered by the EU AI Act, compliance with this binding regulation is mandatory to avoid substantial fines. CompTIA SecAI+ Exam Objectives cover AI regulatory compliance under Domain 4.

Why B is Correct: The EU AI Act explicitly classifies AI systems used for employment screening, candidate evaluation, and worker management as high-risk AI applications. These systems are subject to strict compliance requirements including mandatory conformity assessments, human oversight, transparency obligations, and registration. Non-compliance can result in fines up to 30 million euros or 6% of global annual turnover. A multinational company implementing AI job screening must reference the EU AI Act as the primary compliance obligation.

Why A is Wrong: ISO AI standards such as ISO 42001 are voluntary management system standards. While useful for best practices, they do not carry legal enforcement power and adherence does not prevent regulatory fines from binding legislation like the EU AI Act.

Why C is Wrong: Corporate policy is an internal governance document that sets organizational standards. It cannot supersede external legal obligations and following only corporate policy does not protect against fines from regulatory bodies enforcing the EU AI Act.

Why D is Wrong: NIST AI RMF is a voluntary American risk management framework. While excellent for AI risk governance, it is not a binding regulation and does not address the legal compliance requirements that generate fines from regulatory authorities in jurisdictions covered by the EU AI Act.

Basic Concept: System prompt injection — where an unauthorized party modifies the AI system ' s core instructions — represents a serious integrity attack. Preventing unauthorized modification of system prompts requires controlling who has permission to read and write system-level AI configurations. CompTIA SecAI+ Study Guide covers least privilege access controls for AI system integrity.

Why C is Correct: Configuring least privilege controls for model access restricts who can modify the system prompt to only those with explicit, justified need to do so. By limiting write access to system prompts to authorized administrators and removing it from users who should only query the model, this control directly prevents unauthorized parties from injecting malicious instructions into the system prompt. Least privilege is the foundational control for preventing this class of attack.

Why A is Wrong: Limiting the number of evaluations per user controls request volume. It does not prevent an authorized or unauthorized user from modifying the system prompt itself, which operates at a different level than user query submissions.

Why B is Wrong: Checking for hallucinations and fine-tuning addresses situations where the model generates inaccurate or fabricated content. The described scenario is not a hallucination — the model correctly followed the maliciously injected instruction. The problem is unauthorized system prompt modification, not model accuracy.

Why D is Wrong: Encrypting data in transit protects confidentiality between the user and the AI system. It does not prevent someone with system prompt write access from modifying the prompt content, which is an access control problem rather than an encryption problem.

Basic Concept: A denial-of-wallet (DoW) attack deliberately generates excessive API calls or token consumption to exhaust an organization ' s AI budget. Since LLM providers charge based on tokens processed, attackers can cause significant financial damage by driving massive usage. CompTIA SecAI+ Study Guide addresses financial abuse vectors in AI systems.

Why E is Correct: API rate controls limit the number of requests a user or application can make within a defined time period. By capping request frequency, rate controls directly prevent attackers from generating the massive API call volume needed to execute a denial-of-wallet attack.

Why F is Correct: Output token controls cap the maximum number of tokens the model can generate per response. Since billing is based on tokens consumed including outputs, limiting output tokens directly caps the cost per request, preventing attackers from triggering extremely long, expensive responses.

Why A is Wrong: Endpoint access controls manage device or network access. They do not directly limit token consumption or API call volume that drives denial-of-wallet costs.

Why B is Wrong: A CDN distributes content geographically to improve performance and absorb traffic. It does not control LLM API billing or token consumption.

Why C is Wrong: Model fine-tuning adjusts model parameters for improved performance on specific tasks. It is a training process that does not address active cost-exhaustion attacks.

Why D is Wrong: Modality controls restrict which input types such as text, images, or audio a model accepts. While useful for reducing attack surface, they do not directly address the rate or volume of API calls in a DoW attack.

Basic Concept: Prompt engineers are responsible for designing and refining the prompts and instructions that guide an LLM ' s behavior. When user experience is declining after an LLM launch, this signals that the model ' s outputs are not meeting quality standards. CompTIA SecAI+ addresses prompt engineering quality management under securing and optimizing AI systems.

Why C is Correct: Quality control should be the highest priority when user experience is declining. Prompt engineers must systematically evaluate model responses against quality benchmarks, identify failure patterns causing poor user experience, and iteratively refine prompts to produce accurate, relevant, and appropriately formatted responses. Quality control encompasses testing, evaluation, and continuous improvement of prompt performance.

Why A is Wrong: Customer success management is a business function focused on customer relationship management and retention. While related to user experience outcomes, it is not a technical priority that prompt engineers can directly address through their core competency of prompt design and refinement.

Why B is Wrong: Sales life cycle management is a business process for managing customer acquisition and revenue. It is entirely outside the scope of prompt engineering activities and does not address declining LLM user experience.

Why D is Wrong: Business objectives define what the organization aims to achieve with the LLM deployment. These are set at the strategic level and inform the direction for prompt engineering. They are inputs to the quality control process rather than the priority action prompt engineers should take when experience is declining.

Basic Concept: AI models trained on unrepresentative data can produce systematically inaccurate results for certain population groups. This is a form of algorithmic bias where the model ' s performance varies significantly across demographic segments, creating disparate outcomes. CompTIA SecAI+ Exam Objectives cover bias as a core AI governance and risk concept.

Why A is Correct: Bias in AI occurs when a model produces systematically skewed results for certain groups due to biased training data, flawed data collection, or model design choices. In this healthcare scenario, the inability to reliably predict illnesses for specific population segments indicates the training data likely underrepresented those segments, causing the model to learn inadequate patterns for them. This is a critical bias risk with serious health equity implications.

Why B is Wrong: Consistency refers to the model producing the same output given the same input across different runs or time periods. The problem described is not about inconsistent outputs for the same input but about systematically poor performance for specific population groups.

Why C is Wrong: Transparency refers to openness about how the AI model operates, what data it uses, and how it makes decisions. The compliance officer has already assessed the system, suggesting sufficient transparency exists to identify the performance gap.

Why D is Wrong: Inclusiveness is a design principle ensuring AI systems are designed to serve all users regardless of background. While related to the outcome, the specific risk type described — differential predictive accuracy across population segments — is most precisely categorized as bias.

Basic Concept: In AI teams, different roles hold distinct responsibilities for specific aspects of the AI system. Data quality issues such as incorrect formatting and missing values fall within the domain of data engineering, which is responsible for designing, building, and maintaining the data pipelines and datasets that feed AI models. CompTIA SecAI+ Study Guide covers AI team role definitions under governance and basic AI concepts.

Why C is Correct: A Data Engineer is responsible for building and maintaining the data pipelines, transformation processes, and data quality controls that supply AI models with properly formatted, complete data. Addressing incorrectly formatted data and missing values is a core data engineering responsibility, as these professionals own the ETL (Extract, Transform, Load) processes, data validation rules, and data quality frameworks that ensure the model receives clean, usable input.

Why A is Wrong: A Platform Engineer designs and maintains the computing infrastructure and platforms that host AI systems. Their focus is the technical environment and deployment infrastructure, not the quality or formatting of the data consumed by models.

Why B is Wrong: An MLOps Engineer manages the deployment, monitoring, and operational lifecycle of AI models in production. While they may detect data quality issues through monitoring, resolving data formatting and missing value problems is the responsibility of data engineers who own the data pipelines.

Why D is Wrong: An AI Architect designs the overall AI system architecture, component interactions, and technical strategy. While they define data requirements, the hands-on work of correcting data formatting errors and filling missing values belongs to the data engineering function.

Basic Concept: Agentic AI systems that execute shell commands based on model-generated output are vulnerable to prompt injection attacks where malicious actors craft inputs that cause the agent to run unauthorized commands. Input validation using allowlists is a critical defense mechanism. CompTIA SecAI+ Study Guide covers agentic AI security controls.

Why A is Correct: Adding logic that validates shell commands against an approved allowlist before execution is the most direct and effective defense. This ensures only pre-approved, safe commands can be executed regardless of what the agentic system ' s model generates, preventing malicious command injection from reaching the operating system. This principle of allowlist-based input validation is a foundational secure agentic AI control.

Why B is Wrong: Deprecating and retraining the model is a lengthy process that addresses root cause training issues but does not provide immediate protection against ongoing injection attacks in the current deployed system.

Why C is Wrong: Modifying the application to ignore a specific tag merely removes one attack surface while leaving the system vulnerable to other injection vectors. It is not a comprehensive defense.

Why D is Wrong: Using only approved libraries controls which code libraries the agentic system can call, but does not validate or restrict the shell commands generated by the model at runtime based on arbitrary user input.

Basic Concept: LLM firewalls inspect prompts and responses to identify malicious content, policy violations, and attack attempts. To detect known attack patterns, these systems apply inspection techniques that compare content against established threat indicators. CompTIA SecAI+ Study Guide covers LLM security monitoring and detection techniques.

Why A is Correct: Signature matching compares incoming prompts and outgoing responses against a library of known attack signatures, including common prompt injection patterns, jailbreaking attempts, data exfiltration queries, and known malicious payload strings. When content matches a known attack signature, the LLM firewall can block or flag it. Signature matching is an efficient, proven detection technique for identifying known attack patterns traversing an LLM firewall.

Why B is Wrong: Distributed denial-of-service is itself a type of attack, not a detection technique. DDoS floods systems with traffic to cause service unavailability and has no role in detecting attacks through an LLM firewall.

Why C is Wrong: Translation analysis involves converting content between languages or formats. While it might be used to detect obfuscated attacks in different encodings, it is not a standard detection technique for identifying attacks crossing an LLM firewall.

Why D is Wrong: Vulnerability enumeration systematically identifies and catalogs vulnerabilities in systems or applications during security assessments. It is an assessment activity used to discover weaknesses, not a real-time detection technique for attacks traversing an LLM firewall.

Basic Concept: ISO develops international standards for management systems across various domains. For organizations seeking third-party certification demonstrating commitment to responsible AI governance practices, the appropriate ISO standard must specifically address AI management systems. CompTIA SecAI+ Exam Objectives cover ISO standards relevant to AI governance under Domain 4.

Why D is Correct: ISO 42001 is the International Standard for Artificial Intelligence Management Systems (AIMS). It provides a framework for establishing, implementing, maintaining, and continually improving an AI management system within organizations. ISO 42001 certification provides third-party assurance specifically for responsible AI practices including risk management, transparency, human oversight, and ethical AI governance — directly answering the question.

Why A is Wrong: ISO 20000 is the standard for IT Service Management (ITSM). It provides requirements for establishing and maintaining a service management system for IT services. It does not address AI governance or responsible AI practices.

Why B is Wrong: ISO 27001 is the standard for Information Security Management Systems (ISMS). It addresses general information security risk management, not AI-specific governance or responsible AI practices such as fairness, transparency, and AI lifecycle management.

Why C is Wrong: ISO 27701 extends ISO 27001 to address Privacy Information Management (PIMS), covering personal data protection requirements aligned with GDPR. While relevant to data privacy in AI systems, it does not specifically certify responsible AI governance practices.

Basic Concept: Modern security operations require automation of complex, multi-step workflows. Different AI architectures have different capabilities. Understanding which AI type is best suited for task decomposition and autonomous execution is fundamental to AI-assisted security operations. CompTIA SecAI+ covers agentic AI capabilities under AI-assisted security.

Why A is Correct: Agentic AI systems are specifically designed to autonomously plan, decompose complex tasks into subtasks, execute multi-step workflows, use tools and APIs, and adapt their approach based on intermediate results. For a SOC analyst needing to automate multiple security tasks as a series of smaller coordinated steps, agentic AI is the ideal architecture as it can orchestrate an entire workflow including threat hunting, alert investigation, log analysis, and response actions.

Why B is Wrong: RAG AI enhances language model responses by retrieving relevant documents from a knowledge base. While useful for answering questions with current information, it is not designed for autonomous multi-step task execution or workflow automation.

Why C is Wrong: Generative AI creates content based on prompts including text, code, and summaries. While it can assist with individual tasks, it requires continuous human prompting for each step rather than autonomously breaking down and executing complex multi-step security workflows.

Why D is Wrong: A chatbot is a conversational interface designed for question-answering or guided dialogue. It responds reactively to user input rather than proactively planning and executing multi-step automated security workflows.

Basic Concept: Monitoring an AI system ' s internal runtime behavior requires deep observability into what the system is doing at the code and function execution level, not just at the perimeter. CompTIA SecAI+ Study Guide addresses AI system observability and runtime monitoring under securing AI infrastructure.

Why D is Correct: Enabling stack call and debugging level traces at the function level provides the highest granularity of visibility into internal operations. This approach exposes what functions are called, in what order, with what inputs, and what is returned, offering genuine insight into the AI system ' s internal activity at runtime precisely as the engineer requires.

Why A is Wrong: A SIEM aggregates and correlates log and event data from multiple sources. While useful for security alerting, it does not inherently provide visibility into internal function-level operations of an AI model at runtime.

Why B is Wrong: A WAF with header logging monitors and filters HTTP traffic at the application boundary. It captures external request and response data, not the AI system ' s internal runtime mechanics.

Why C is Wrong: Relying on vendor controls and monitoring prompt inputs is a passive, externally-focused approach. It provides no visibility into intermediate computations or internal operations within the AI model itself.

Basic Concept: DoS attacks overwhelm AI systems by sending excessive requests that exhaust computational resources, memory, or bandwidth, preventing legitimate users from being served. The primary defense against volume-based attacks is throttling the rate at which requests can be processed. CompTIA SecAI+ Exam Objectives identify rate limiting as the key DoS mitigation control for AI systems.

Why B is Correct: Rate limiting directly addresses the root mechanism of DoS attacks by restricting the number of requests any single client or IP address can submit within a defined time window. By enforcing request quotas, rate limiting prevents attackers from generating the request volume necessary to overwhelm the system while preserving capacity for legitimate users. It is the most direct and effective preventive control against DoS attacks on AI APIs and services.

Why A is Wrong: Model guardrails inspect and filter the content of prompts and responses for policy compliance and safety. They operate at the semantic content level, not at the request volume level, and cannot prevent resource exhaustion from high-volume request flooding.

Why C is Wrong: End-to-end encryption protects the confidentiality and integrity of data in transit. Encrypted DoS traffic is just as damaging as unencrypted traffic; encryption does not limit request rates or prevent resource exhaustion.

Why D is Wrong: Access controls restrict who can interact with the system, which can reduce the potential attacker pool. However, authenticated users and compromised accounts can still launch DoS attacks, and access controls alone cannot prevent high-volume attacks from authorized sources.

Basic Concept: When employees interact with public-facing LLMs, any data they input may be processed, logged, or used for model training by the third-party provider. This creates serious regulatory and compliance risks, particularly when sensitive corporate or customer data is involved. CompTIA SecAI+ flags data governance and regulatory compliance as primary concerns in enterprise AI adoption.

Why C is Correct: Submitting sensitive business data, PII, financial records, or proprietary information to public LLMs may violate data protection regulations such as GDPR, HIPAA, or CCPA. These violations can result in substantial fines, legal liability, and significant reputational damage. This represents the most severe and impactful organizational risk from corporate use of public LLMs.

Why A is Wrong: Hallucinations where LLMs generate plausible but incorrect information are a reliability concern. However, they do not expose the company to the level of legal and financial penalties that data regulatory violations create.

Why B is Wrong: Out-of-date acceptable use policies represent an internal governance gap. This is a policy management issue rather than a direct risk with immediate legal or financial consequences.

Why D is Wrong: While LLMs can potentially generate malicious code if deliberately prompted, this requires adversarial intent. For typical corporate users, accidental data disclosure to a public LLM represents a far more common and immediate organizational risk.

Basic Concept: Unstructured data such as free-form text, images, and audio does not have predefined labels or rigid schema. Training an AI model effectively on unstructured data requires techniques that can leverage patterns within the data itself or adapt a pre-trained model to new data types. CompTIA SecAI+ covers AI training methodologies under basic AI concepts.

Why B is Correct: Fine-tuning takes a pre-trained foundation model that has already learned rich representations from massive unstructured datasets and further trains it on a specific, potentially smaller unstructured dataset. This adapts the model to a new domain, task, or data type without requiring labeled data for every training example. Fine-tuning is the most practical and effective approach for working with unstructured data in modern AI development.

Why A is Wrong: Statistical learning typically refers to classical machine learning approaches that often assume structured, numerical data with defined features. These methods generally struggle with high-dimensional unstructured data without significant preprocessing.

Why C is Wrong: Supervised learning requires labeled training data where each example has an associated correct output label. Applying supervised learning to unstructured data requires extensive manual labeling, which is the opposite of working with raw unstructured data.

Why D is Wrong: Reinforcement learning trains models through reward signals based on actions taken in an environment. It is designed for sequential decision-making tasks and is not the standard approach for learning representations from unstructured data at scale.

Basic Concept: AI manipulation attacks exploit vulnerabilities in systems, interfaces, and content. Some security approaches are inherently more resistant to AI-driven attacks because they reduce the available avenues through which manipulation can occur, rather than attempting to detect or block individual attacks. CompTIA SecAI+ Study Guide covers defensive strategies for AI system protection.

Why D is Correct: Attack surface reduction minimizes the number of entry points, interfaces, and components available for exploitation. By eliminating unnecessary services, APIs, integrations, and features, it reduces the total number of pathways through which AI-driven manipulation attacks can be attempted. Unlike signature-based or behavioral detection, attack surface reduction provides structural resistance regardless of how sophisticated or novel the AI manipulation technique is.

Why A is Wrong: Payloads are the malicious content used in attacks, not a defensive control. Attackers using AI can generate increasingly sophisticated payloads designed to evade detection, making them highly susceptible to AI-driven manipulation rather than resistant to it.

Why B is Wrong: AI-generated content is a product of AI systems and can itself be manipulated or weaponized by adversarial AI. It is not a defense mechanism and is inherently vulnerable to AI-driven manipulation and poisoning.

Why C is Wrong: An API gateway provides a managed access point for API traffic with authentication and filtering capabilities. However, APIs are primary attack targets for AI manipulation and require ongoing security updates. API gateways are less fundamentally resistant than structural attack surface reduction.

Why E is Wrong: Antivirus relies on signatures and behavioral heuristics to detect known malware. AI-powered attacks can generate novel, polymorphic payloads that evade signature detection, making antivirus less resistant to AI manipulation than attack surface reduction.

Basic Concept: A chatbot that learns from user prompts is vulnerable to data poisoning through conversational injection. Malicious users can deliberately introduce false information that the chatbot incorporates into its knowledge, corrupting responses for subsequent users. CompTIA SecAI+ Study Guide identifies this as a real-time data poisoning vector requiring guardrail controls.

Why D is Correct: Guardrails prevent the chatbot from accepting and incorporating unverified, irrelevant, or potentially malicious information injected by users. They enforce boundaries on what the chatbot can learn from user interactions, validate that information aligns with the system ' s purpose and known facts, and block outputs based on poisoned knowledge. Guardrails are specifically designed to prevent the type of conversational data poisoning demonstrated where a user ' s false claim corrupted the model ' s subsequent responses.

Why A is Wrong: Data encryption protects the confidentiality of data in transit and at rest. It does not prevent a chatbot from accepting and acting on false information that users deliberately inject into the conversation.

Why B is Wrong: API rate limiting restricts the frequency of requests. While it can limit the number of poisoning attempts a single user can make, it does not prevent the chatbot from learning from and propagating false information when requests are made at an acceptable rate.

Why C is Wrong: Transfer learning is a training technique that adapts knowledge from one domain to another. It is a model development approach, not a runtime control that prevents users from injecting false information into a deployed chatbot.

Basic Concept: Preventing prompt injection and ensuring output sanitization requires a control that can inspect both the semantic content of incoming prompts and the safety of outgoing responses. This requires an intelligent, context-aware filtering layer specifically designed for LLM traffic. CompTIA SecAI+ Study Guide identifies LLM firewalls as a primary control for prompt security and output safety.

Why C is Correct: An LLM firewall is specifically designed to inspect, filter, and sanitize both incoming prompts and outgoing AI responses. It can detect and block prompt injection attempts using pattern matching, semantic analysis, and behavioral heuristics, while also sanitizing output to remove sensitive data, harmful content, or policy violations before responses reach users. This dual capability makes it the primary control addressing both requirements simultaneously.

Why A is Wrong: Least privilege restricts what resources and actions users and systems can access. It reduces the potential impact of successful attacks but does not inspect prompt content for injection attempts or sanitize model outputs.

Why B is Wrong: Encryption protects data confidentiality in transit and at rest. It does not analyze prompt content for malicious patterns or filter AI-generated responses for unsafe content. Encrypted traffic can still carry prompt injection attacks.

Why D is Wrong: Rate limiting controls request frequency. While it can slow down automated injection attack campaigns, it does not inspect the content of individual prompts to detect injections, nor does it sanitize output responses. Malicious prompts can still succeed within rate limits.