We're so confident of our products that we provide no hassle product exchange.
CompTIA CY0-001 Exam Overview:
| Certification Vendor: | CompTIA |
| Exam Name: | CompTIA SecAI+ Certification Exam |
| Exam Number: | CY0-001 |
| Passing Score: | 600 (scale 100–900) |
| Exam Price: | $359 USD |
| Exam Format: | Multiple-choice, Performance-based |
| Real Exam Qty: | Up to 60 |
| Related Certifications: | CompTIA Security+ CompTIA CySA+ CompTIA PenTest+ |
| Exam Duration: | 60 minutes |
| Available Languages: | English |
| Certificate Validity Period: | 3 years |
| Recommended Training: | CompTIA Official Training |
| Exam Registration: | CompTIA Official Registration Pearson VUE |
| Sample Questions: | CompTIA CY0-001 Sample Questions |
| Exam Way: | Online proctored (OnVUE) or in-person at Pearson VUE test centers |
| Pre Condition: | Recommended: 3–4 years IT experience, 2+ years hands-on cybersecurity; Security+, CySA+, PenTest+ or equivalent knowledge |
| Official Syllabus URL: | https://www.comptia.org/en/certifications/secai/ |
CompTIA CY0-001 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Basic AI Concepts Related to Cybersecurity | 17% | - Core AI principles and terminology
|
| AI-assisted Security | 24% | - AI for threat detection and response
|
| AI Governance, Risk and Compliance | 19% | - Governance frameworks and policies
|
| Securing AI Systems | 40% | - Security controls for AI systems
|
CompTIA SecAI+ Certification Sample Questions:
1. An organization wants to reduce vulnerabilities after deployment. The organization decides to incorporate an AI-assisted early detection and vulnerability identification process in its development workflow.
Which of the following AI-assisted functions is the best option?
A) System auditing
B) Automated deployment/rollback
C) Incident management
D) Code linting
2. A security analyst finds that the AI system is under a denial-of-wallet attack.
Which of the following should the analyst enforce to protect the company? (Choose two.)
A) Endpoint access controls
B) Output token controls
C) Modality controls
D) Content delivery network (CDN)
E) Model fine-tuning
F) Application programming interface (API) rate controls
3. An AI security administrator receives an inquiry about an unusually high monthly bill from the AI solution provider. The administrator thinks the majority of staff might be using the most powerful model available.
Which of the following AI measures should the administrator implement to lower costs?
A) Modality types
B) Token limits
C) Storage monitoring
D) Prompt firewalls
4. A machine learning (ML) engineer is working with a security engineer to identify the best practices for securing a system with various AI models.
Which of the following actions should the engineers suggest?
A) Conducting guardrail testing and security validation
B) Following a secure model development life cycle (MDLC)
C) Using a secure software development life cycle (SDLC)
D) Implementing comprehensive security architecture
5. A company develops an AI model to diagnose patients. Hospitals access the model through an integrated application programming interface (API). The security team performs a denial-of-service (DoS) attack via brute force on the model.
Which of the following controls would have prevented this issue?
A) Model guardrails
B) Prompt firewall
C) Tokenization
D) Rate limiting
Solutions:
| Question # 1 Answer: D | Question # 2 Answer: B,F | Question # 3 Answer: B | Question # 4 Answer: B | Question # 5 Answer: D |
By Nat
