AI Security Architecture and Controls

CRAGE · 18 questions

• A city CISO sets architecture principles for municipal AI. Which secure-by-design trio best fits?
• County IT maps defense-in-depth for a civic AI stack. Which layer set best fits?
• Transit hardens model-serving APIs used by rider apps. Which pattern best fits?
• Housing IT prepares eligibility models for production. Which control best protects model integrity before go-live?
• A water utility deploys leak-prediction services in containers. Which runtime control set best fits?
• 311 places controls in front of GenAI backends. Which API gateway capability set best fits?
• Courts deploy a public chatbot tier near sealed-case systems. What architecture control best fits?
• A library builds custom microservices that wrap GenAI models. Which expectation best fits secure delivery?
• Fire/EMS threat-models camera training pipelines. Which control focus best fits?
• A public hospital district reviews AI architecture diagrams. Which approach best strengthens the review?
• An elections office integrates vendor model APIs. Which credential practice best fits?
• The assessor’s office maintains valuation-model wrappers. Which secure coding practice best fits?
• Parks enables detection for a booking GenAI assistant. Which monitoring focus best fits abuse?
• City security rejects a proposal for a public-facing AI tool. Which sole control is inadequate?
• County defines inference-time controls for GenAI and predictive APIs. Which set best fits?
• A utility exposes AI endpoints for customer self-service. Which availability protection best fits?
• 311 reviews security logging for a GenAI assistant. Which practice best balances forensics and privacy?
• Public works designs AI environments for a resident-facing predictor. Which separation rule best fits?