AI0-001 AI Security Practice Question
A security analyst notices that an LLM-based code assistant sometimes generates code snippets that appear to have been copied from its training data, including comments containing internal company names. Which type of attack could this inadvertently expose?
⚠ Common exam trap
Comptia often tests the distinction between data extraction (model inversion) and data corruption (data poisoning), so candidates mistakenly choose data poisoning because they conflate the idea of 'data leaking' with 'data being injected.'
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Model inversion
The LLM inadvertently reproducing verbatim training data, including internal company names, is a classic symptom of a model inversion attack. In this context, model inversion refers to an adversary extracting sensitive training data (e.g., proprietary code or comments) from the model's parameters by crafting prompts that cause the model to regurgitate memorized examples. This exposes confidential information that was never intended to be revealed, directly violating data confidentiality.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Model denial of service
Why it's wrong here
Model denial of service overwhelms the model, not extract data.
- ✓
Model inversion
Why this is correct
Model inversion reconstructs training data; leaking internal names is a sign of successful inversion.
- ✗
Data poisoning
Why it's wrong here
Data poising corrupts training data to manipulate behavior, not to extract data.
- ✗
Prompt injection
Why it's wrong here
Prompt injection manipulates the model's instructions, not extracts training data.
About these practice questions
Courseiva writes every AI0-001 question from scratch — 962 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.