SISA Certified Security Professional in Artificial Intelligence - CSPAI Exam Questions

A. Exclusion of stakeholder input in assessments. B. Short-term tactical responses over strategic planning. C. Operational Critical Threat, Asset, and Vulnerability Evaluation focused on organizational risks. D. Solely technical vulnerabilities in AI models.

A. Focusing only on internal development risks. B. Ignoring open-source dependencies to reduce complexity. C. Evaluating third-party components for embedded vulnerabilities. D. Assuming all vendors comply with standards automatically.

A. By ignoring low-priority vulnerabilities to focus on high-impact ones. B. By compiling lists of vulnerabilities without any analysis. C. By generating code patches and suggesting fixes based on vulnerability descriptions. D. By increasing the frequency of manual scans to ensure thoroughness.

A. Prompt injections B. input sanitation C. Model firewall D. Adversarial testing involves systematically simulating attack vectors, such as input perturbations or evasion techniques, to evaluate an AI model's robustness and identify vulnerabilities before deployment. This proactive method replicates real-world threats, like adversarial examples that fool classifiers or prompt manipulations in LLMs, allowing developers to observe behavioral anomalies, measure resilience, and implement defenses like adversarial training or input validation. Unlike passive methods like input sanitation, which cleans data reactively, adversarial testing is dynamic and comprehensive, covering scenarios from data poisoning to model inversion. In practice, tools like CleverHans or ART libraries facilitate these simulations, providing metrics on attack success rates and model degradation. This is crucial for securing AI models, as it uncovers hidden weaknesses that could lead to exploits, ensuring compliance with security standards. By iterating through attack-defense cycles, it enhances overall data and model integrity, reducing risks in high-stakes environments like autonomous systems or financial AI. Exact extract: "Adversarial testing is a method where simulation of various attack scenarios is applied to analyze the model's behavior, helping to fortify AI against potential threats." (Reference: Cyber Security for AI by SISA Study Guide, Section on AI Model Security Testing, Page 140-143). E. Adversarial testing

A. By relying exclusively on manual adjustments and human input for predictions. B. By continuously learning from new data patterns to refine predictions C. By avoiding any use of past data and focusing solely on current trends D. By using historical data patterns to make predictions without updates

A. Leveraging a diverse set of data sources to enrich the response with varied perspectives B. Integrating advanced search algorithms to ensure the retrieval of highly relevant documents for context. C. Utilizing feedback mechanisms to continuously improve the relevance of responses based on user interactions. D. Retrieving relevant information from the vector database before generating a response