AAISM Practice Test 17 — 15 Questions

Question 1

You are configuring Microsoft Defender for Cloud for an Azure OpenAI deployment. To detect prompt injection attempts effectively, which specific setting must be enabled in the 'Microsoft Defender for Cloud Apps' dashboard?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enable 'AI Security Posture Management' (AI-SPM). Microsoft Defender for Cloud leverages 'AI Security Posture Management' to identify anomalous prompts that resemble injection patterns.

Answer

Set 'Log Analytics' retention to 365 days

Answer

Configure 'Conditional Access' policies for API keys

Answer

Enable 'Azure Policy' for resource tagging

Question 2

You are implementing 'Red Teaming' for a Large Language Model (LLM). What is the main objective of this exercise?

Accepted Answer

Proactively identify safety and security vulnerabilities. AI Red Teaming identifies vulnerabilities by actively attempting to exploit the model through adversarial prompts.

Answer

Train the model on new, proprietary datasets

Answer

Reduce the cost of API inference

Answer

Increase the accuracy of the model's predictions

Question 3

When securing a large language model (LLM) using the OWASP Top 10 for LLMs, which control is most effective against 'Insecure Output Handling'?

Accepted Answer

Enforcing strict output validation and sanitization. Insecure Output Handling occurs when a model output is interpreted by a downstream system without sanitization. Output validation (canonicalization) is the primary defense.

Answer

Using fine-grained RBAC

Answer

Implementing Rate Limiting

Answer

Encrypting training data

Question 4

In the context of 'Model Poisoning', what is a 'Backdoor' attack?

Accepted Answer

Embedded trigger causing specific model behavior. A backdoor is a trigger (a specific pattern) embedded into the model during training so that it behaves normally until the trigger is present, at which point it performs a malicious action.

Answer

Deleting the model's training documentation

Answer

Increasing the model's complexity

Answer

Bypassing authentication servers

Question 5

An AI Security analyst is configuring Google Cloud Vertex AI Model Garden to ensure compliance with organization policies. Which IAM permission is strictly required to prevent unauthorized users from deploying a base model to a public endpoint?

Accepted Answer

aiplatform.endpoints.create. The roles/aiplatform.user role allows usage, but 'aiplatform.endpoints.create' or specific restrictions on the Endpoint resource are needed to prevent public exposure.

Answer

aiplatform.metadata.read

Answer

aiplatform.jobs.create

Answer

aiplatform.models.upload

Question 6

During an adversarial threat modeling exercise for a facial recognition system, you identify a risk of pixel perturbation attacks. Which countermeasure is the most appropriate technical control to implement?

Accepted Answer

Conduct adversarial training by injecting perturbed samples into the training set.. Adversarial training involves training the model on examples containing perturbations, making it robust against those specific attacks.

Answer

Apply data masking to the input images.

Answer

Implement differential privacy during data preprocessing.

Answer

Increase the model epoch count to improve generalization.

Question 7

An AI administrator is using Azure AI Content Safety to detect jailbreak attempts in prompt engineering. Which configuration must be enabled to proactively block prompt injection attacks?

Accepted Answer

Configure Prompt Shield. The Prompt Shield feature in Azure AI Content Safety specifically targets user-to-model prompt injection and jailbreak attacks.

Answer

Apply Customer Managed Keys (CMK)

Answer

Enable Protected Material Detection

Answer

Implement Jailbreak Mitigation via Language Detection

Question 8

An organization is evaluating 'Third-Party AI Models'. Which risk is most effectively addressed by a 'Model Evaluation Report'?

Accepted Answer

The risk of model unsuitability or unexpected behavior.. An evaluation report details the model's capabilities, limitations, and performance, helping the user determine if it fits their risk profile.

Answer

The risk of the vendor going bankrupt.

Answer

The risk of poor UI/UX design.

Answer

The risk of high API latency.

Question 9

What is the primary role of a 'Human-in-the-loop' (HITL) in AI risk management?

Accepted Answer

To provide oversight and intervention for critical model decisions.. HITL ensures that human oversight is present in high-stakes decisions, mitigating risks of automation bias or AI failure.

Answer

To write the model code.

Answer

To speed up the inference process.

Answer

To handle technical server maintenance.

Question 10

When dealing with 'Adversarial Evasion', why is the 'black-box' nature of an API a risk?

Accepted Answer

Because it allows attackers to build surrogate models via iterative querying.. In a black-box attack, an attacker can craft perturbations by repeatedly querying the API and analyzing the outputs to build a substitute model.

Answer

Because it makes the model impossible to update.

Answer

Because it prevents log auditing.

Answer

Because it forces the use of HTTPS.

Question 11

You are implementing 'AI Red Teaming'. What is the most effective way to test against prompt injection?

Accepted Answer

Execute a series of iterative adversarial prompt attempts against the production model.. AI Red Teaming involves systematically probing the model with adversarial prompts to evaluate its response under stress.

Answer

Check for compliance with data privacy laws.

Answer

Review the training data logs for errors.

Answer

Scan the code repository for hardcoded secrets.

Question 12

You are managing risks for a federated learning deployment. What is the primary security concern regarding the 'model updates' sent from the edge clients to the aggregator?

Accepted Answer

Gradient leakage leading to privacy loss.. In federated learning, local model updates can be analyzed to reconstruct private training data from the clients.

Answer

The aggregator becoming a single point of failure.

Answer

Encryption of the communication channel.

Answer

Slow network speeds at the edge.

Question 13

When utilizing a third-party AI vendor, which contractual requirement is most critical for addressing 'shadow AI' risks within an enterprise?

Accepted Answer

A clause requiring the vendor to disclose all sub-processors.. Standardized procurement processes and inventory tracking (shadow AI) require clear vendor auditing and accountability clauses.

Answer

A mandate to use the vendor's cloud region exclusively.

Answer

A request for a free trial period.

Answer

A requirement for 99.99% uptime SLA.

Question 14

When assessing the risk of 'Prompt Leaking', what is the most important control to implement?

Accepted Answer

Strict output filtering and instruction separation.. Prompt leaking occurs when a model reveals its system instructions. Limiting the LLM's access to sensitive context and using robust system prompts is key.

Answer

Increasing the model's parameter count.

Answer

Encrypting the model output.

Answer

Only allowing access from internal IP addresses.

Question 15

What is the key risk difference between 'Data Privacy' and 'Model Security' in AI?

Accepted Answer

Data privacy is about PII protection; model security is about system integrity.. Data privacy focuses on the protection of the information used in models (PII), while model security focuses on the integrity/availability of the model logic.

Answer

Data privacy is only for training data, not inference data.

Answer

There is no difference.

Answer

Model security is only about physical hardware.