CompTIA SecAI+ Certification Exam CY0-001 Exam Questions

Basic Concept: Modern security operations require automation of complex, multi-step workflows. Different AI architectures have different capabilities. Understanding which AI type is best suited for task decomposition and autonomous execution is fundamental to AI-assisted security operations. CompTIA SecAI+ covers agentic AI capabilities under AI-assisted security.

Why A is Correct: Agentic AI systems are specifically designed to autonomously plan, decompose complex tasks into subtasks, execute multi-step workflows, use tools and APIs, and adapt their approach based on intermediate results. For a SOC analyst needing to automate multiple security tasks as a series of smaller coordinated steps, agentic AI is the ideal architecture as it can orchestrate an entire workflow including threat hunting, alert investigation, log analysis, and response actions.

Why B is Wrong: RAG AI enhances language model responses by retrieving relevant documents from a knowledge base. While useful for answering questions with current information, it is not designed for autonomous multi-step task execution or workflow automation.

Why C is Wrong: Generative AI creates content based on prompts including text, code, and summaries. While it can assist with individual tasks, it requires continuous human prompting for each step rather than autonomously breaking down and executing complex multi-step security workflows.

Why D is Wrong: A chatbot is a conversational interface designed for question-answering or guided dialogue. It responds reactively to user input rather than proactively planning and executing multi-step automated security workflows.

Basic Concept: When AI models are deployed in production, they interact with real data including sensitive business information, personal data, and confidential records. The intersection of AI capabilities and sensitive data creates significant security risks. CompTIA SecAI+ Exam Objectives identify data exposure as the primary production security risk for AI deployments.

Why D is Correct: Data exposure is the primary security risk in production AI deployments. AI models in production process sensitive data through queries and responses, and vulnerabilities such as prompt injection, model inversion attacks, insecure output handling, and misconfigured access controls can expose confidential training data, user PII, proprietary information, or system credentials. The consequences include regulatory violations, legal liability, and reputational damage, making data exposure the most critical ongoing security concern.

Why A is Wrong: GPU acceleration is a performance optimization technique that uses graphics processors for faster AI computation. While hardware security is important, GPU acceleration itself is not a security risk — it is a performance feature that does not inherently expose data.

Why B is Wrong: Model overfitting is a model quality issue where a model performs poorly on new data after memorizing training data too specifically. While it can indirectly contribute to data memorization, it is primarily a performance and generalization concern during development rather than a primary production security risk.

Why C is Wrong: Model encryption is a security control used to protect AI model weights from unauthorized access, not a risk itself. Framing a protection mechanism as a primary risk conflates controls with threats

The matching behavior between the unauthorized dark-web model and the company ' s proprietary model strongly indicates a model-theft or unauthorized model-copying risk. Model encryption is the most appropriate control among the available choices because it directly protects proprietary model artifacts, including model weights and other sensitive intellectual property, from unauthorized access or extraction when stored or transferred. CompTIA SecAI+ specifically identifies model theft as an AI-system attack and lists encryption among the compensating controls used to protect AI systems. Parameter anonymization is not the primary protection for proprietary model weights and does not prevent unauthorized possession of the model itself. A prompt firewall analyzes prompts for malicious or prohibited input but does not protect model files from theft. Input validation similarly protects an application from malformed or malicious inputs rather than safeguarding the model ' s intellectual property. Therefore, strengthening protection of the model artifact through encryption is the most directly applicable mitigation for future deployments.

================

Basic Concept: AI systems interact with different resource layers including models, data stores, and infrastructure. Controlling what data an AI system can access requires implementing access controls at the data layer. CompTIA SecAI+ Study Guide differentiates between model access, data access, and network access controls for AI systems.

Why D is Correct: Data access controls govern what data resources an AI system can interact with, including which databases, tables, and records it can read or modify. To control an AI system ' s ability to list database tables, the administrator must implement data access controls that define precisely which tables the AI can enumerate and query, following the principle of least privilege for data interactions.

Why A is Wrong: Agentic AI access refers to permissions granted to autonomous AI agents to perform actions and use tools. It is a broader concept about what an AI agent can do operationally rather than a specific data-layer access control mechanism.

Why B is Wrong: A Network Access Control List controls network traffic at the IP and port level, determining which hosts can communicate with which network resources. It operates at the network layer and cannot enforce fine-grained control over which database tables an AI system is allowed to list.

Why C is Wrong: Model access controls govern who and what can interact with the AI model itself — who can query it, update it, or access its parameters. This is distinct from data access, which controls what the model can read from data stores during operation.

Basic Concept: When employees interact with public-facing LLMs, any data they input may be processed, logged, or used for model training by the third-party provider. This creates serious regulatory and compliance risks, particularly when sensitive corporate or customer data is involved. CompTIA SecAI+ flags data governance and regulatory compliance as primary concerns in enterprise AI adoption.

Why C is Correct: Submitting sensitive business data, PII, financial records, or proprietary information to public LLMs may violate data protection regulations such as GDPR, HIPAA, or CCPA. These violations can result in substantial fines, legal liability, and significant reputational damage. This represents the most severe and impactful organizational risk from corporate use of public LLMs.

Why A is Wrong: Hallucinations where LLMs generate plausible but incorrect information are a reliability concern. However, they do not expose the company to the level of legal and financial penalties that data regulatory violations create.

Why B is Wrong: Out-of-date acceptable use policies represent an internal governance gap. This is a policy management issue rather than a direct risk with immediate legal or financial consequences.

Why D is Wrong: While LLMs can potentially generate malicious code if deliberately prompted, this requires adversarial intent. For typical corporate users, accidental data disclosure to a public LLM represents a far more common and immediate organizational risk.