SecAI+ practice questions
CompTIA · CY0-001 · 200 questions
Original practice questions for the CompTIA SecAI+ CY0-001 exam, covering basic AI concepts related to cybersecurity, securing AI systems, AI-assisted security, and AI governance, risk, and compliance. Content is original practice material aligned to the official exam domains and framed in civic and municipal scenarios such as city AI pilots, public-health records, permitting chatbots, 311 assistants, courts and clerk workflows, and transit / utilities / emergency-management operations. This is not a brain-dump of actual exam questions.
This course contains the use of artificial intelligence.
About the CY0-001 exam
- Time allowed
- 1 hour
- Questions
- Maximum of 60
- Passing score
- 600 (on a scale of 100-900)
- Languages
- English, Japanese
- Format
- Multiple-choice and performance-based questions
Exam details published by the vendor, checked 23 October 2026. Vendors change fees and formats without notice — confirm on the vendor's own page before you book.
Practice Quizzes
Test your knowledge with standard 20-question practice sets.
Quiz 1
Quiz 2
Quiz 3
Quiz 4
Quiz 5
Quiz 6
Quiz 7
Quiz 8
Quiz 9
Quiz 10
Browse by Domain
Study specific topics at your own pace.
Basic AI Concepts Related to Cybersecurity · 34 questions
- A city 311 office pilots a chatbot that drafts resident reply emails from published policy PDFs instead of only assigning ticket categories. Which AI capability best describes that drafting work?
- A water utility trains a model on years of meter telemetry so it can flag anomalous consumption before billing disputes escalate. Which description best matches that approach?
- A tax assessor's office estimates parcel risk scores from property features using statistical learning methods rather than a deep neural network. What distinction should the AI lead emphasize?
- A courts clerk chatbot summarizes long motion filings for docket staff using a modern language model. Which architecture family most directly enables that summarization capability?
- A transit authority analyzes platform camera feeds to estimate crowd density near boarding areas for safety operations. Which AI approach best fits that vision workload?
- A small parks department needs an on-premises assistant for trail FAQs and is weighing a large cloud LLM against a small language model. When is the SLM the better fit?
- A city communications team reviews how generative adversarial networks could be abused to fabricate fake mayor press videos. What risk concept should the team associate with GANs in that scenario?
- A public-health clinic labels prior outbreak cases so a model can predict high-risk ZIP codes for outreach. Which training approach does that labeling enable?
- A police records bureau wants to discover theme groups in incident narratives without predefined category labels. Which learning approach fits that goal?
- An emergency-management dispatcher assistant is tuned so better resource-routing suggestions earn positive feedback rewards. Which training paradigm is being applied?
- County IT fine-tunes a permits FAQ model, then prunes and quantizes it so building-inspector tablets can run it offline. What is the primary goal of pruning and quantization here?
- A housing-authority chatbot must never reveal applicant SSNs even when residents type free-form questions. Which prompt control best enforces that boundary?
- A library helpdesk AI answers overdue-fine questions more consistently after staff paste one example reply into the prompt. Which prompting technique are they using?
- A fire-district incident-response summarizer always uses a locked prompt template and a "safety officer" system role for after-action drafts. What benefit do those controls provide?
- Before training a 311 intent model, city analysts remove duplicate tickets and verify category codes against the service catalog. Which data-security hygiene step is that?
- After an elections chatbot gives a wrong answer, a clerk's office must show which open-data CSV fed the embedding index. What practice enables that investigation?
- A school-district bullying-report classifier overfits the majority "none" label until staff carefully augment and balance rare categories. What problem are they correcting?
- A wastewater plant feeds SCADA numeric tables, JSON work orders, and free-text operator notes into one anomaly assistant. How should the AI team classify those inputs?
- A city wants AI-generated open-meeting summaries marked so public copies can be traced if altered. Which technique directly supports that authenticity goal?
- A permits desk embeds building-code sections so a chatbot can retrieve relevant clauses before answering contractors. What role do those embeddings play?
- County counsel stores ordinance embeddings in a vector database isolated from the public web tier. Why is that design significant for RAG security?
- Public-health staff find silent row corruption in a vaccination-training extract before a scheduled model refresh. What should they prioritize?
- A transit chatbot cites a superseded fare policy because the RAG corpus was never checked after a board vote. Which control was missing?
- An open-data portal tags each dataset with publisher and update stamp before any city LLM may ingest it. What requirement does that tagging satisfy?
- A mayor's office rejects a flashy generative demo that does not map to reducing 311 backlog KPIs. What lifecycle principle is the office applying?
- Emergency management wants to train a flood-damage classifier using resident-submitted photos. Which practice best protects trustworthiness during data collection?
- Housing caseworkers need case notes ready for a fine-tune job. Which data-preparation step best reduces sensitive-data exposure before training starts?
- County IT must choose a model for assessor Q&A about local valuation rules. Which selection approach best matches municipal scope and risk?
- A courts chatbot is nearly ready for clerk staff. Which action best represents a proper model-evaluation gate before go-live?
- Parks IT is rolling out a reservation assistant. Which deployment approach best supports safe municipal validation?
- After winter storms, a road-closure summarizer starts citing outdated detours. Which lifecycle response best addresses the drift?
- 311 agents keep flagging weak chatbot draft replies. Which practice best turns that signal into safer iteration?
- A welfare-eligibility assistant drafts benefit recommendations. Which control best applies human-in-the-loop for high-impact civic decisions?
- An AI tool proposes mutual-aid staging plans during a multi-alarm fire. Which oversight practice is most appropriate before paging resources?
Securing AI Systems · 80 questions
- A city security architect must threat-model a resident chatbot before launch. Which resource is most appropriate for cataloging LLM application risks?
- A utility data-science team is securing a predictive pipe-break model that is not an LLM chatbot. Which threat resource best fits classical ML security risks?
- County risk management is cataloging potential harms from a police bodycam summarizer. Which resource best supports broad AI risk cataloguing?
- A SOC lead needs to describe an attempted model-theft campaign against a municipal LLM API using adversarial AI techniques. Which resource is most appropriate?
- City vulnerability management learns a shared embedding library used by several civic AI apps has a newly published flaw. Which intelligence source is most relevant to track?
- A school-district CISO wants structured risk analysis of a student chatbot architecture before procurement. Which approach best applies threat-modeling practice?
- A transit fare bot needs both adversary technique mapping and LLM application risk coverage. Which pairing best reflects complementary AI threat resources?
- Internal audit asks the city to show how AI threats informed controls on the permitting assistant. Which evidence best answers that request?
- Analysts review a jailbreak attempt against a clerk chatbot. Which next step best uses published LLM risk categories?
- A county red team will test municipal AI services. Which planning approach best incorporates AI-focused adversarial techniques?
- Security must approve expanding a 311 bot citywide. Which model-control requirement best gates that expansion?
- A public-health chatbot must not give clinical diagnoses even when residents insist. Which control best enforces that constraint?
- Building inspectors query an AI assistant about code sections. Which model-control pattern best keeps answers grounded in citations?
- Election staff worry about instruction-override attempts reaching the elections FAQ model. Which gateway control best addresses that threat?
- A scraper hammers the city's open-data AI API with rapid repeated requests. Which gateway control best mitigates that abuse?
- County counsel fears long ordinance pastes could inflate cost and enable context-stuffing attacks on a legal AI assistant. Which control best addresses that concern?
- A housing chatbot must reject oversized uploads and limit how many files each caseworker can send per day. Which gateway control best matches that requirement?
- A courts portal AI should accept text filings but reject image and audio uploads to reduce deepfake-input risk. Which control best implements that policy?
- Only the permits VLAN service account should be able to call the internal building-code model endpoint. Which control best enforces that?
- After a model upgrade, security must confirm the housing assistant still refuses SSN disclosure. Which practice best validates that control?
- Transit wants launch hardening for a fare bot using layered gateway defenses. Which approach best combines complementary controls?
- Analysts designing a clerk assistant must place protections correctly in the stack. How do in-model guardrails differ from gateway prompt firewalls?
- The requirement is to stop prompt flooding against the city's 311 AI API. Which controls should the team prioritize first?
- An emergency-ops agent must not call paging APIs unless a human confirms first. Which control best enforces that?
- Only certified building officials should reach the advanced code-interpretation model tier. Which access approach best fits?
- A parks chatbot project does not need tax-lien datasets. Which data-access control best applies?
- A change-management AI agent may read CMDB tickets but must not approve production firewall changes. Which access design is correct?
- The public 311 bot API must stay edge-protected while private model endpoints remain internal. Which network pattern best fits?
- A shared AI platform identity currently spans model, vector-store, and logging systems. What change best applies least privilege?
- A contractor must evaluate a pilot model without keeping permanent production rights. Which access approach is most appropriate?
- HR policy documents live in a vector collection the public parks bot must not query. Which control best enforces separation?
- Departing employees must lose model API access automatically when they leave city SSO groups. Which design best achieves that?
- An incident-response summarization agent should call the ticketing API only from an approved tool set. Which control best fits?
- Model admin consoles for the elections assistant must not be reachable from the public Internet. Which control best enforces that?
- Field inspector tablets must send prompts to the building-code model without exposing them on the network path. Which control is required?
- Vector indexes of sensitive case notes must remain protected while stored. Which control best addresses that risk?
- A high-sensitivity benefits-eligibility pilot needs stronger protection while records are processed in memory during inference. Which approach best fits?
- Public health must share a training extract with a vendor without exposing patient identifiers. Which control should be applied first?
- RAG documents for the clerk bot should only be retrievable by roles allowed for each sensitivity level. Which control enables that?
- An IR ticket summarizer must not send cardholder data to a cloud LLM. Which control best prevents that disclosure?
- A permitting bot demo for city council must avoid showing real parcel owner names. Which control best fits the demo environment?
- A city business-license fraud model collects dozens of applicant attributes. After a privacy review, which redesign best applies data minimization?
- Transit ops wants an anomaly model on vehicle telemetry. Which approach best layers data-security controls before the feature store is built?
- Social-services staff notice that chatbot prompt logs contain resident case details. How should the city treat those logs?
- County records plans to embed open-records PDFs that sometimes contain driver’s license numbers. Which control belongs in the RAG ingestion pipeline?
- A public library kiosk hosts an ordinance FAQ bot. Which retrieval rule best enforces data classification?
- On election night, the county SOC needs visibility into unusual activity against the elections FAQ model. Which monitoring focus is most appropriate?
- After a model update, the parks department wants assurance the chatbot still follows policy. Which practice best fits response monitoring?
- City SOC wants early warning when the 311 AI gateway starts failing under load. Which integration best supports that goal?
- Before shipping AI prompt logs to a vendor SIEM, which step best protects resident privacy?
- Courts IT must ensure AI audit logs for the clerk assistant cannot be quietly altered after an incident. Which control best protects those logs?
- A benefits eligibility bot sometimes answers with low certainty. Which monitoring use of confidence levels is most appropriate?
- After a weekend outage scare on the permits AI API, operations needs better health and abuse visibility. Which metric focus is most useful?
- Finance notices a sudden spend jump on the city’s open-data LLM after a viral social post. Which monitoring practice best explains and contains that growth?
- Parks leadership wants monthly assurance the trail chatbot does not invent closed trails. Which audit approach best fits?
- Building officials need to know whether the code-interpretation bot cites the right sections. Which audit best measures that?
- HR pilots an AI screen for city job applications. Which audit is most appropriate before wider use?
- Internal audit asks whether sealed-case RAG collections stay limited to authorized clerks. Which practice answers that question?
- The SOC wants low-confidence AI IR summaries handled safely. Which workflow best operationalizes confidence monitoring?
- Attackers might try to silence AI cost and abuse alerts. Which control best protects the monitoring pipeline itself?
- A resident pastes instructions telling the 311 bot to ignore prior rules and reveal internal routing notes. Analysts should classify this evidence as which attack?
- After repeated injection attempts on a clerk assistant, which compensating controls best harden the service?
- Investigators find malicious samples inserted into the fine-tune set for a business-license fraud model. What attack does this evidence indicate?
- An open-data pothole classifier starts failing after crowdsourced uploads flood the training set with mislabeled images. Which attack best describes this?
- After a poisoning incident, a water utility must harden training inputs. Which compensating control best addresses data integrity?
- Testers coax a parks safety bot into giving unsafe trail advice by using role-play that bypasses refusal rules. What attack pattern should analysts document?
- A municipal clerk bot invents a case citation that never existed, creating legal exposure for the city attorney. How should security treat this failure?
- Crafted Unicode in a permit form confuses an AI fee classifier into assigning the wrong fee tier. What attack class should analysts document?
- An adversary seeds skewed complaint tickets so a neighborhood-priority model favors one district over others. What attack should the city document?
- Users encode prohibited health questions in another language to bypass a public-health bot’s guardrails. What technique should defenders recognize?
- An attacker abuses a weak plugin that lets the 311 bot create forged work orders in the city’s CMMS. What failure mode is this?
- Researchers show an assessor valuation model can leak whether a specific parcel was in the training set. What privacy attack should the city treat as in scope?
- Repeated structured queries against a city API suggest an attempt to exfiltrate or approximate a fine-tuned municipal model. What should analysts flag?
- After extraction attempts on a city model API, which compensating controls best reduce further theft risk?
- A compromised upstream base model used for transfer learning affects the city’s fine-tuned permitting assistant. What risk should leadership prioritize?
- Subtle production feedback loops skew a business-license fraud model’s outputs away from true positives. What attack or failure pattern is this?
- A junior admin executes an AI-generated script without review and drops a critical firewall rule on the city edge. What failure should the post-incident report emphasize?
- Giant adversarial prompts exhaust GPU workers hosting the emergency-ops summarizer. What attack should the SOC classify?
- An overly trusted agent with excess tools emails internal HR data into a public ticket thread. Which failure modes best describe this incident?
- After an agent disclosure incident, which compensating control set best hardens the city’s AI assistants?
AI-assisted Security · 48 questions
- City developers use an IDE security plug-in that flags risky patterns while building the permits API. What AI-assisted security use does this illustrate?
- SOC analysts use a browser plug-in that summarizes CVE pages while triaging municipal vulnerabilities. Which AI-enabled tool pattern is this?
- Network ops run a CLI AI helper that explains firewall hit counters during an outage bridge. What AI-assisted security capability is demonstrated?
- A SOC chatbot drafts first-pass incident timelines from SIEM excerpts for the duty officer. What AI-assisted use case is this?
- A CISO’s personal AI assistant prepares talking points from last week’s vulnerability scan summaries. What practice should still apply?
- County SecOps connects an MCP server so an assistant can safely query allowlisted ticketing tools. What role does the MCP server play?
- AI assists signature matching across EDR alerts during a ransomware wave on city endpoints. Which AI-assisted detection use is this?
- AI linting catches insecure deserialization patterns in a new courts e-filing service. What AI-assisted DevSecOps capability is shown?
- Analysts use AI to prioritize scanner findings on water-utility SCADA jump hosts. What AI-assisted security task is this?
- A scheduled AI-assisted pentest probes the public 311 portal within an approved scope window. What requirement remains essential?
- AI anomaly detection flags unusual VPN logins from assessor staff accounts overnight. What AI-assisted security capability is demonstrated?
- City email security uses AI to cluster look-alike messages that target payroll clerks with fake direct-deposit changes. What security-task capability is the model providing?
- When the transit SOC opens an incident, an AI helper suggests severity and owner fields from the alert text before an analyst confirms. Which use of AI-enabled tooling does this illustrate?
- Security architects ask an AI assistant to propose STRIDE-style questions for a new elections voter-lookup portal, then decide which threats to track. What is the appropriate role of the AI tool?
- Finance notices AI scoring that highlights odd refund chains on business-license payments after hours. Which AI-assisted security task best describes this capability?
- After a city breach, communications needs resident security notices in several common languages within hours. How can AI best support that security communications task?
- The change advisory board receives a thick week of firewall change logs and asks for a readable packet. Which AI-assisted security task should the SOC apply?
- Wastewater engineers must review sensitive packet captures on an air-gapped plant network and cannot send traces to a public cloud chatbot. Which AI security tool choice best fits the constraint?
- Finance receives a video that appears to show the mayor urgently ordering a wire to a ‘disaster relief’ account that city treasury does not recognize. What AI-enhanced attack vector should responders consider first?
- Synthetic social posts claim the municipal water supply is poisoned, and 911 call volume spikes even though plant sensors are normal. Which AI-enhanced attack impact does this illustrate?
- Coordinated generative content floods local channels with fabricated stories meant to make voters distrust certified county election results. What AI-enhanced attack vector is primarily at work?
- Slightly perturbed images cause a municipal license-plate camera model to miss vehicles on a watch list even though humans can still read the plates. What AI-enhanced attack technique is indicated?
- Attackers feed public org charts and news into an AI system to build ranked lists of city staff titles for spear-phishing. Which AI-enhanced attack activity is this?
- Helpdesk receives a call that sounds exactly like the CIO urgently demanding a password reset for a ‘locked’ finance account. What AI-enhanced social-engineering technique should staff suspect?
- Endpoint tools miss a sample because AI rewrote distinctive malware strings while keeping the same malicious behavior against city workstations. Which AI-enhanced attack capability does this describe?
- After a badge dump leaks, attackers use AI to merge the dump with professional profiles and highlight which accounts likely have privileged access. What AI-enhanced attack step is shown?
- An unauthorized AI fuzzer discovers a forgotten debug endpoint on a public permits microservice during continuous probing. Which AI-enhanced attack capability does this represent?
- Threat intelligence reports phishing lures that AI customized for public works, finance, and courts using each department’s jargon. What AI-enhanced attack capability is described?
- Adversaries train models to recognize telltale honeypot behaviors and route botnet traffic around those municipal decoys. What AI-enhanced attack impact should defenders anticipate?
- During property-tax payment week, attackers use AI to pick peak hours and high-value endpoints for a botnet flood against the portal. Which AI-enhanced attack planning activity is this?
- IR receives a video ‘mayor directive’ to disable MFA citywide and compares it to known authentic channels before acting. What operational skill does this primarily demonstrate?
- External scanners with AI summarizers inventory unprotected model APIs across city subdomains and dump findings into a paste site. What AI-enhanced attack activity is occurring?
- Clerk security training stresses that generative tools make personalized phishing cheap enough to hit every desk, not just executives. What defensive awareness concept is the training emphasizing?
- The SOC builds a low-code flow that enriches indicators of compromise from allowlisted feeds before an analyst reviews the case. Which AI/automation approach for security tasks does this illustrate?
- When an AI anomaly score crosses a threshold, a no-code playbook automatically opens a security ticket for the housing-authority SOC. What automation pattern is this?
- After a multi-day incident, fire-district IR wants a coherent after-action draft from scattered shift notes. Which AI automation task best fits?
- During a citywide phishing wave, the municipal SOC’s AI proposes merging dozens of near-identical resident-help tickets. Which IR ticket-management use best fits?
- The city’s change advisory board uses AI to flag change requests that omit a rollback plan before humans vote. What automation pattern is this?
- A new permits-chatbot model fails health checks after deploy, so the pipeline restores the last known-good version automatically. Which practice is demonstrated?
- An AI agent collects EDR host details for water-utility analysts but is blocked from isolating hosts by itself. What agent design principle applies?
- Courts IT blocks merges on the case-management repo unless AI-assisted code scanning passes. Which CI/CD security practice is this?
- Software composition analysis with AI prioritization flags a critical library in the city’s 311 mobile app. What CI/CD practice does this illustrate?
- Regression tests fail after a public-health chatbot prompt-template change breaks PII redaction. What CI/CD control caught the issue?
- Automated model tests fail when a new fine-tune of the housing-benefits assistant starts leaking sample SSNs in outputs. What pipeline control is working?
- The city requires scan results, model tests, and dual human approval before promoting a parks chatbot to production. Which deployment practice is this?
- Emergency-management playbooks auto-enrich incidents but pause before any public notification draft is sent. What automation safety pattern is shown?
- For hosts adjacent to municipal SCADA, policy forbids fully automated AI isolation even when detections look strong. What principle is the city applying?
- A phishing surge triggers AI triage, ticket creation, and a draft user notice that waits for the CISO to send. Which end-to-end automation pattern is this?
AI Governance, Risk, and Compliance · 38 questions
- The city stands up an AI Center of Excellence to coordinate pilots across public-health, permits, and 311. What governance structure is this?
- City council adopts an AI acceptable-use policy covering public chatbots and staff copilots. What governance artifact is this?
- Under CoE standards, a data scientist prepares labeled datasets for the housing-authority fraud model. Which role responsibility is illustrated?
- An AI architect designs the reference pattern for department RAG assistants on the city’s cloud. What role is primarily demonstrated?
- An ML engineer owns training pipelines for the city’s traffic-signal optimization model. How does this role differ from security or governance roles?
- Platform and MLOps engineers harden shared model hosting used by multiple city agencies. Which governance role focus is this?
- An AI security architect must review threat models before any municipal chatbot goes public. What accountability does this role provide?
- An AI governance engineer maintains model cards and approval workflows in the city’s model registry. What does this role support?
- Before go/no-go, an AI risk analyst scores residual risk for a police-department NLP pilot. Which function is this?
- An AI auditor samples production prompts quarterly for policy compliance in the clerk’s office assistants. What assurance activity is this?
- A data engineer builds lineage-tracked ETL into the vector store powering the clerk RAG assistant. Which role contribution is shown?
- Procedure requires AI security architect sign-off plus CoE intake before any production AI spend. What governance practice is this?
- A benefits chatbot is reviewed for fair treatment across language and zip-code groups before wider release. Which responsible-AI principle is primary?
- An emergency chatbot’s replies must clear reliability and safety bars before hurricane season. Which responsible-AI principle is primary?
- Residents demand transparent notices when AI assists parking-citation reviews. Which responsible-AI expectation does this reflect?
- A library AI tutor must uphold privacy and security commitments in children’s programs. Which responsible-AI pillar is primary?
- Policy assigns accountability owners and requires consistent AI behavior across district kiosks. Which responsible-AI cluster is this?
- All municipal staff complete shadow-AI awareness training before using any generative tools. What control does this represent?
- Historical policing data risks introducing bias into a municipal deployment-priority model. Which AI risk is primary?
- Staff paste confidential council memos into a public LLM, risking accidental leakage. Which AI risk is illustrated?
- A hallucinated public-health answer causes media scrutiny of the city’s chatbot. Which AI risk is primary?
- A vendor model’s license creates IP risk for redistributing generated city code snippets. Which risk cluster is in play?
- A semi-autonomous drone inspection program raises accountability questions after a near miss. Which AI risk focus applies?
- Departments run unsanctioned ChatGPT plugins on case data — classic shadow AI. What organizational risk does this describe?
- The AI CoE green-lights a pilot only after fairness, privacy, and accountability checks pass. What practice is this?
- A city with EU-resident services maps a high-risk AI use case to EU AI Act obligations. Which compliance impact is this?
- Policy writers cite OECD AI principles when updating the city’s AI ethics charter. Which standards influence is this?
- Procurement asks vendors whether offerings align to relevant ISO AI management standards. Which compliance practice is this?
- Risk teams structure AI controls using NIST AI RMF functions for a courts chatbot. Which framework application is this?
- Only sanctioned AI tools may process resident PII; unsanctioned tools are blocked. Which corporate AI policy is this?
- Sensitive casework must use private or hosted models, not public consumer LLM endpoints. Which policy distinction is this?
- Sensitive-data governance forbids feeding CJIS-regulated content into unapproved AI. Which compliance intersection is this?
- Before buying a vendor SOC AI, the city runs a third-party compliance evaluation. Which practice is this?
- Residency rules require vector stores for resident PII to remain in-country or in-region. Which constraint is this?
- GRC maps NIST AI RMF controls to local policy and notes EU AI Act triggers for a grant-funded tool. Which compliance practice is this?
- Developers delay a facial-analytics pilot after compliance flags a high-risk classification. How does compliance affect development?
- Marketing cannot use generative ads with resident photos until consent and compliance review clear. Which impact is this?
- Auditors request model cards, sanctioned-tool lists, and sovereignty attestations for city AI systems. What are these?
These questions are original practice material and are NOT actual exam questions or brain-dump content. All vendor marks are trademarks of their respective owners. This site is not affiliated with, endorsed by, or sponsored by CompTIA.