AI0-001 AI Security, Ethics and Governance Practice Question
A security team discovers that an AI-based anomaly detection system frequently misclassifies benign network traffic as malicious when the source IP is from a specific geographic region. Which type of AI vulnerability is most likely being exploited?
⚠ Common exam trap
The AI0-001 exam often tests the distinction between data poisoning (training-time attack) and adversarial evasion (inference-time attack), and the trap here is that candidates confuse the geographic bias with a poisoned training set rather than recognizing it as an evasion technique exploiting the model's learned regional patterns.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Adversarial evasion
The scenario describes an AI-based anomaly detection system that misclassifies benign traffic from a specific geographic region as malicious. This is a classic example of an adversarial evasion attack, where an attacker crafts inputs (in this case, network traffic) that appear benign to human analysts but cause the AI model to misclassify them. The geographic bias suggests the attacker is exploiting the model's learned decision boundary, likely by manipulating features such as source IP or packet timing to evade detection.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Data poisoning
Why it's wrong here
Data poisons the training data to degrade model performance, not cause regional misclassification on benign traffic.
- ✗
Model inversion
Why it's wrong here
Model inversion extracts training data, not causes misclassification.
- ✓
Adversarial evasion
Why this is correct
Adversarial evasion manipulates input features to cause misclassification. The regional bias suggests crafted inputs bypassing detection.
- ✗
Membership inference
Why it's wrong here
Membership inference determines if a record was in training data, not misclassification.
About these practice questions
This AI0-001 question is part of Courseiva's 754-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.