Courseiva
AI SecuritymediumMultiple SelectObjective-mapped

AI0-001 AI Security Practice Question

A security engineer is implementing defenses against membership inference attacks on a classification model. Which TWO techniques are most effective? (Select TWO.)

⚠ Common exam trap

CompTIA often tests the misconception that data augmentation or encryption directly prevent inference attacks, when in fact they address different threat models (data diversity and confidentiality, respectively) and do not limit the model's output leakage.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Differential privacy

Differential privacy (C) is effective against membership inference attacks because it adds calibrated noise to the training process or model outputs, ensuring that the model's behavior does not significantly change whether any individual data point is included. This bounds the attacker's ability to distinguish between members and non-members of the training set, directly mitigating the core vulnerability exploited by membership inference.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Data augmentation

    Why it's wrong here

    Data augmentation can improve generalization but does not specifically protect against membership inference.

  • Homomorphic encryption

    Why it's wrong here

    Homomorphic encryption protects data in computation but does not prevent membership inference attacks on the model.

  • Differential privacy

    Why this is correct

    Differential privacy adds noise to training, bounding the contribution of each data point.

  • Increasing model size

    Why it's wrong here

    Larger models tend to memorize more, increasing membership inference risk.

  • Model regularization

    Why this is correct

    Regularization reduces overfitting, limiting the model's memorization of training data.

About these practice questions

Courseiva writes every AI0-001 question from scratch — 754 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.