CompTIA Updated CY0-001 Exam Questions and Answers by guy

Basic Concept: Data validation is a critical step in the AI development pipeline that involves verifying that the data used for training and inference meets quality standards, is representative, and is free from systematic errors that could introduce bias. The quality of training data directly determines the quality and fairness of model outputs. CompTIA SecAI+ Study Guide covers data validation under AI development and responsible AI principles.

Why D is Correct: The primary purpose of data validation for an AI system is to ensure that the data is accurate, representative, and free from systematic errors that would cause the model to produce biased or discriminatory outcomes. Validating data checks for class imbalance, demographic underrepresentation, labeling errors, and corrupted values that could embed biases into the model. This ensures the AI system produces fair, accurate, and trustworthy outputs across all user groups.

Why A is Wrong: Automating the process is a benefit of using automated data validation tools but is not the primary purpose of validation itself. The automation serves the validation goal rather than being the reason validation is performed.

Why B is Wrong: Reducing resource consumption is an engineering optimization concern. Data validation may reduce resource waste by preventing training on poor-quality data, but this is a secondary benefit, not the primary purpose.

Why C is Wrong: Optimizing storage databases is a database engineering concern about performance and efficiency. Data validation examines data quality and representativeness for AI purposes, not database architecture optimization.

Basic Concept: AI systems interact with different resource layers including models, data stores, and infrastructure. Controlling what data an AI system can access requires implementing access controls at the data layer. CompTIA SecAI+ Study Guide differentiates between model access, data access, and network access controls for AI systems.

Why D is Correct: Data access controls govern what data resources an AI system can interact with, including which databases, tables, and records it can read or modify. To control an AI system ' s ability to list database tables, the administrator must implement data access controls that define precisely which tables the AI can enumerate and query, following the principle of least privilege for data interactions.

Why A is Wrong: Agentic AI access refers to permissions granted to autonomous AI agents to perform actions and use tools. It is a broader concept about what an AI agent can do operationally rather than a specific data-layer access control mechanism.

Why B is Wrong: A Network Access Control List controls network traffic at the IP and port level, determining which hosts can communicate with which network resources. It operates at the network layer and cannot enforce fine-grained control over which database tables an AI system is allowed to list.

Why C is Wrong: Model access controls govern who and what can interact with the AI model itself — who can query it, update it, or access its parameters. This is distinct from data access, which controls what the model can read from data stores during operation.

Basic Concept: Data integrity in AI systems requires not only that data is accurate at a point in time, but that its entire history of transformation and usage can be traced and verified. Tracking how data has been used and transformed throughout the AI system lifecycle provides ongoing integrity assurance. CompTIA SecAI+ Study Guide covers data governance controls including lineage for AI integrity.

Why D is Correct: Data lineage tracks and documents the complete journey of data from its origin through every transformation, processing step, and use within an AI system. By recording what happened to the data, when, by whom, and through which processes, data lineage provides the audit trail needed to ensure data integrity throughout the AI system ' s data usage lifecycle. It enables verification that data has been used as intended and has not been improperly modified at any stage.

Why A is Wrong: Data masking replaces sensitive data values with anonymized equivalents to protect privacy. It is a confidentiality control that modifies data values rather than a mechanism for ensuring or tracking data integrity across the system.

Why B is Wrong: Data cleansing removes or corrects errors, inconsistencies, and noise in datasets to improve data quality. It is a data preparation activity that improves data accuracy at a point in time but does not track data usage or provide ongoing integrity assurance throughout the AI system lifecycle.

Why C is Wrong: Data verification confirms that data meets expected quality standards and validates its accuracy at a specific check point. While important for quality assurance, it provides a point-in-time check rather than continuous tracking of data usage and transformations as data lineage does.

Basic Concept: ISO develops management system standards for various organizational domains. For organizations building and managing AI systems in a structured, compliant manner, the appropriate ISO standard must specifically address the unique requirements of AI management systems including risk governance, lifecycle management, and accountability. CompTIA SecAI+ Exam Objectives cover ISO standards applicable to AI governance.

Why D is Correct: ISO 42001 (Artificial Intelligence Management System — AIMS) is the international standard specifically designed for building and managing AI management systems. It provides compliance requirements and guidance for establishing, implementing, maintaining, and continually improving an organization ' s AI management system, addressing AI-specific concerns including risk management, AI system governance, accountability, transparency, and continuous improvement for AI applications.

Why A is Wrong: ISO 20000 is the Information Technology Service Management (ITSM) standard covering IT service delivery processes, SLAs, incident management, and change management. It is not an AI management standard and does not address AI-specific governance requirements.

Why B is Wrong: ISO 27001 is the Information Security Management System (ISMS) standard addressing organizational information security risk management through controls and policies. While relevant to data security in AI systems, it does not contain requirements specifically for building an AI management system.

Why C is Wrong: ISO 27018 is a code of practice for protection of personally identifiable information (PII) in public cloud computing environments, extending ISO 27001 for cloud privacy. It addresses cloud PII protection rather than AI system management compliance requirements.