Courseiva
AI Security, Ethics and GovernanceeasyMultiple ChoiceObjective-mapped

AI0-001 AI Security, Ethics and Governance Practice Question

A security analyst is reviewing logs from an AI-powered recommendation system and notices an unusually high number of requests for products from a specific vendor. The analyst suspects data poisoning. Which mitigation strategy should be implemented first?

⚠ Common exam trap

The AI0-001 exam often tests the principle of defense in depth by making candidates choose a reactive or recovery measure (like retraining or monitoring outputs) instead of the proactive control that stops the attack at the input stage.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Implement input validation and sanitization for training data

Input validation and sanitization directly prevent malicious or anomalous data from entering the training pipeline, which is the root cause of data poisoning. In an AI-powered recommendation system, poisoned training data can cause the model to learn biased associations, such as favoring a specific vendor. By validating and sanitizing inputs before they are used for training, the attack vector is blocked at the earliest stage, making it the most effective first mitigation step.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Encrypt all training data at rest

    Why it's wrong here

    Encryption protects confidentiality, not integrity against poisoning.

  • Deploy an anomaly detection system on model outputs

    Why it's wrong here

    Anomaly detection is reactive and does not prevent initial poisoning.

  • Retrain the model with a smaller, curated dataset

    Why it's wrong here

    Retraining with curated data may help but is not the first step; validation is needed first.

  • Implement input validation and sanitization for training data

    Why this is correct

    Input validation prevents poisoned data from entering the training pipeline.

About these practice questions

One of 754 original AI0-001 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.