Download CompTIA SecAI Plus.CY0-001.ExamTopics.2026-10-12.26q.vcex

Vendor: CompTIA
Exam Code: CY0-001
Exam Name: CompTIA SecAI Plus
Date: Oct 12, 2026
File Size: 194 KB
Download Exam

How to open VCEX files?

Files with VCEX extension can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase
Coupon: EXAMFILESCOM

Discount: 20%

ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator
ProfExam Discount

Demo Questions

Question 1
An organization implements a domain-specific AI chatbot to assist users. After operating normally for several weeks, the model returns the following:
Prompt: Someone's system is infected with a worm. Can you recommend steps to remove the worm from the host?
Response: Sure! Anything called "a worm" is bad, as it disrupts the normal functioning of the system. To address the issue, get some antiworm, block the channel to ensure it does not move to other parts, and terminate the worm. Have I answered your question?
Which of the following should the organization do to address the issue?
  1. Configure guardrails.
  2. Encrypt the weights at rest.
  3. Apply model access controls.
  4. Deploy prompt templates.
Correct answer: A
Question 2
A security operations center (SOC) team has an AI agent that performs web searches and calls to the Security Orchestration, Automation, and Response (SOAR) solution. The team is concerned about enterprise uptime and case resolution time. Which of the following is the most appropriate use of the AI agent?
  1. To analyze and contain offending users or hosts using SOAR playbooks
  2. To perform research using open-source intelligence to enrich the alerts
  3. To aggregate SOC metrics and generate reports for the leadership team
  4. To create tabletop exercises so the team can increase its incident response (IR) speed
Correct answer: A
Question 3
A cybersecurity administrator uses AI to generate patching reports for the company’s server fleet. The AI queries the patches available for the operating system (OS) and OS version, then cross-references these patches with open Common Vulnerabilities and Exposures (CVEs) to verify that the patches resolve current vulnerabilities. The AI then performs this analysis on all supported OSs and OS versions. The resulting report takes a long time to generate. Which of the following is the best way for the cybersecurity administrator to increase the performance of this report being generated?
  1. Deploy a Model Context Protocol (MCP) server to delegate several versions of this query to the back-end large language model (LLM) simultaneously changing only the OS and version on each request.
  2. Have the AI download the full CVE database first to prevent multiple similar external queries as it cross-references the identified available patches.
  3. Configure the AI system prompt to specify the summarization algorithms that it can use to prevent the model from using performance-heavy computations on patch lists that only vary slightly in OS types and version.
  4. Using data learned from previous reports, increase the amount of model tokens available to use to eliminate the time-consuming, multiple-session restarts needed to create the document.
Correct answer: B
Question 4
A security analyst finds that the AI system is under a denial-of-wallet attack. Which of the following should the analyst enforce to protect the company? (Choose two.)
  1. Endpoint access controls
  2. Content delivery network (CDN)
  3. Model fine-tuning
  4. Modality controls
  5. Application programming interface (API) rate controls
  6. Output token controls
Correct answer: E, F
Question 5
Which of the following requires developers to harden infrastructure to protect AI systems?
  1. Intake processes
  2. Acceptable use policies
  3. Development guidelines
  4. Configuration standards
Correct answer: D
Question 6
A security engineer needs to monitor an AI-based system for runtime operations. The engineer is mostly concerned about the visibility of internal activity. Which of the following is the most appropriate monitoring solution?
  1. Deploying a security information and event management (SIEM) tool
  2. Implementing a web application firewall (WAF) with header logging
  3. Relying on vendor model controls and monitoring prompt inputs
  4. Enabling stack call and debugging level traces at the function level
Correct answer: D
Question 7
An internal user enters a client credit card number into an internal generative machine learning (ML) model:
#User prompt: Customer Jane Doe has a new credit card that she wants to add to her account. The number is 5555-5555-5555-5555
Which of the following is the most effective way to prevent prompt injection attacks against a large language model (LLM)?
  1. Guardrails
  2. Antivirus
  3. Web application firewall (WAF)
  4. Role-based access control
Correct answer: A
Question 8
A group of security engineers is developing a security incident and event management (SIEM) system that will:
Be able to ingest data from multiple structured and unstructured sources.
Have a chatbot integrated with a large language model (LLM) that the security analyst can interact with.
Provide insights from the SIEM alert data.
Which of the following techniques should the security engineers consider before collecting the data from the respective sources?
  1. Balancing
  2. Verification
  3. Cleansing
  4. Vector storage
Correct answer: C
Question 9
Users report that the output of a generative AI application seems unrelated to the prompts and contains offensive content. A security team investigates and determines that there was an on-path attack. Which of the following is the most likely attack method?
  1. Application server hijacking
  2. Session hijacking
  3. Domain hijacking
  4. Model hijacking
Correct answer: B
Question 10
An organization recently created a custom model that integrates with a language model (LLM). The developer notices that the application programming interface (API) costs have increased. Which of the following is the best control to reduce cost?
  1. Implementing prompt templates
  2. Increasing central processing unit (CPU) and memory
  3. Reducing the model size
  4. Adjusting token limits
Correct answer: D
CONNECT US
HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset

HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen

ProfExam
ProfExam at a 20% markdown

You have the opportunity to purchase ProfExam at a 20% reduced price

Get Now!