CompTIA Updated CY0-001 Exam Questions and Answers by thalia

Obfuscation is the correct answer because the observed inputs show deliberate attempts to make content difficult for automated security controls or AI systems to interpret while preserving enough meaning for the intended recipient. Character look-alikes, unusual Unicode substitutions, abnormal spacing, and deliberately fragmented sentence structures are common techniques for disguising malicious or restricted content. CompTIA SecAI+ explicitly identifies obfuscation within the AI-assisted security domain as a way AI can enable or enhance attack vectors.

Disinformation involves intentionally spreading false information to deceive an audience, while misinformation refers to inaccurate information that may be distributed without deliberate malicious intent. Neither term describes manipulating the representation of text to evade detection. Anonymization removes or obscures identifying information to protect identity or privacy; it does not explain character substitution or malformed sentence construction. In this scenario, the attacker is manipulating how the input appears so filtering, pattern-matching, or other inspection mechanisms may have difficulty recognizing the underlying content. Therefore, obfuscation most precisely describes the activity.

================

Basic Concept: When AI models are deployed in production, they interact with real data including sensitive business information, personal data, and confidential records. The intersection of AI capabilities and sensitive data creates significant security risks. CompTIA SecAI+ Exam Objectives identify data exposure as the primary production security risk for AI deployments.

Why D is Correct: Data exposure is the primary security risk in production AI deployments. AI models in production process sensitive data through queries and responses, and vulnerabilities such as prompt injection, model inversion attacks, insecure output handling, and misconfigured access controls can expose confidential training data, user PII, proprietary information, or system credentials. The consequences include regulatory violations, legal liability, and reputational damage, making data exposure the most critical ongoing security concern.

Why A is Wrong: GPU acceleration is a performance optimization technique that uses graphics processors for faster AI computation. While hardware security is important, GPU acceleration itself is not a security risk — it is a performance feature that does not inherently expose data.

Why B is Wrong: Model overfitting is a model quality issue where a model performs poorly on new data after memorizing training data too specifically. While it can indirectly contribute to data memorization, it is primarily a performance and generalization concern during development rather than a primary production security risk.

Why C is Wrong: Model encryption is a security control used to protect AI model weights from unauthorized access, not a risk itself. Framing a protection mechanism as a primary risk conflates controls with threats.

Basic Concept: When implementing guardrails for compliance purposes, organizations need a recognized framework or standard that provides authoritative guidance on what guardrails should address and how to implement them. Compliance guardrails require industry-recognized standards as their basis. CompTIA SecAI+ Study Guide identifies OWASP as the primary reference for LLM application security controls including guardrails.

Why B is Correct: OWASP provides the OWASP Top 10 for Large Language Model Applications, which is a recognized industry resource defining the most critical vulnerabilities in LLM applications and the guardrails needed to mitigate them. Using OWASP as the reference for compliance-required guardrails provides a defensible, industry-standard basis for the security controls implemented, satisfying compliance requirements with authoritative guidance on what guardrails should prevent and how they should function.

Why A is Wrong: RAG is an AI architecture that enhances LLM responses with retrieved external context. It is a capability enhancement technique, not a framework for defining or implementing security guardrails for compliance purposes.

Why C is Wrong: LLM libraries are software development toolkits that provide functions for working with language models. While they may include built-in guardrail features, they are implementation tools, not the governance resource or standard that compliance guardrail requirements should be based upon.

Why D is Wrong: A SIEM is a security monitoring and alerting platform that aggregates and analyzes log data. It is a detection and monitoring tool, not a framework that defines what guardrails are required for LLM application compliance.

Basic Concept: Suspicious queries in AI system logs indicate that potentially malicious or policy-violating prompts are reaching the AI model. Proactively intercepting and filtering suspicious prompts before they are processed requires a prompt-level security control. CompTIA SecAI+ Study Guide identifies prompt firewalls as the appropriate control for blocking suspicious AI queries.

Why A is Correct: A prompt firewall analyzes incoming queries using a combination of pattern matching, semantic analysis, and policy rules to identify and block suspicious prompts before they reach the AI model. It can detect prompt injection attempts, jailbreaking patterns, sensitive data extraction queries, and other suspicious prompt characteristics. By intercepting malicious prompts at the perimeter, it prevents them from influencing model behavior or extracting sensitive information.

Why B is Wrong: Data size controls limit the volume or size of data in requests. While controlling input size can prevent some attacks, it does not analyze the content or semantics of queries to detect suspicious patterns. A small suspicious prompt can be just as harmful as a large one.

Why C is Wrong: Rate limiting controls the frequency of requests from a source. While it can slow down automated attack campaigns, it does not inspect query content for suspicious patterns and allows suspicious queries through as long as they are submitted below the rate threshold.

Why D is Wrong: Agentic AI is an AI architecture for autonomous multi-step task execution. It is a type of AI system, not a security control for filtering suspicious queries from an existing AI system ' s logs.