AI0-001 AI Security Practice Question
A security analyst is evaluating adversarial threats to a deployed image classifier. Which attack involves making tiny, often imperceptible changes to input images to cause misclassification?
⚠ Common exam trap
AI0-001 often tests the distinction between adversarial examples (inference-time input manipulation) and data poisoning (training-time data corruption), tempting candidates to confuse the two.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Adversarial examples
Adversarial examples are inputs deliberately perturbed with small, often imperceptible changes to cause a machine learning model to misclassify. This matches the description of tiny changes to images leading to misclassification. The attack exploits the model's sensitivity to high-dimensional input spaces.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Model inversion
Why it's wrong here
Model inversion reconstructs training data from a model's outputs, not perturbing inputs. It is tempting because it also targets model confidentiality, and would be correct when the goal is recovering representative features or sensitive training samples from prediction confidence scores.
- ✗
Membership inference
Why it's wrong here
Membership inference determines whether a specific record was in the training set; it does not alter images to force misclassification. It is tempting because both are privacy and adversarial concerns for deployed models, and would be correct when assessing training-data leakage.
- ✓
Adversarial examples
Why this is correct
Adversarial examples perturb input pixels by amounts imperceptible to humans, yet the cumulative gradient-aligned noise crosses the classifier's decision boundary, producing confident misclassification. This directly matches the stem's requirement for tiny input changes causing misclassification, unlike poisoning, evasion or model-inversion attacks, which alter training data or extract information instead.
- ✗
Data poisoning
Why it's wrong here
Data poisoning corrupts the training dataset so the model learns wrong patterns; it does not perturb inference-time inputs. It is tempting because both attacks degrade classifier accuracy, and would be correct when an adversary controls or contaminates the data used to train or fine-tune the model.
About these practice questions
Courseiva writes every AI0-001 question from scratch — 962 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.