AI0-001 AI Security Practice Question
A security engineer is conducting threat modeling for an AI system that uses a pre-trained image classifier. Applying STRIDE, which threat category most directly addresses an attacker manipulating the model's behavior by providing carefully crafted inputs that the model was not trained to handle robustly?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Tampering
Tampering involves unauthorized modification of data or systems. In this context, adversarial examples tamper with the input data to alter the model's behavior. Spoofing is about impersonation, Repudiation is about denying actions, and Information disclosure is about exposing sensitive data.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Repudiation
Why it's wrong here
Repudiation concerns denying that an action occurred, typically lacking audit evidence, and does not describe crafted inputs altering model predictions. It is tempting where logging of inference requests is absent, but adversarial example manipulation is Tampering, which covers modifying model behaviour.
- ✓
Tampering
Why this is correct
Tampering covers adversarial inputs that alter model behaviour at inference time, satisfying the stem's crafted-input constraint. Unlike spoofing, which targets identity, tampering directly addresses integrity attacks on the classifier's decision boundary, such as adversarial examples the pre-trained model never encountered during training.
- ✗
Information disclosure
Why it's wrong here
Information disclosure covers exposure of model data, weights or training inputs, not adversarial inputs altering predictions. It is tempting because model extraction and membership inference leak information, but crafted-input manipulation maps to Tampering, which addresses modification of model behaviour.
- ✗
Spoofing
Why it's wrong here
Spoofing concerns impersonating a legitimate user, device or service, not perturbing classifier outputs. It is tempting because adversarial examples can impersonate a target class, yet STRIDE places manipulation of the model's processing and behaviour under Tampering, which covers the crafted input itself.
About these practice questions
One of 962 original AI0-001 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.