AI0-001 AI Security Practice Question
A security team is threat modeling an AI system that recommends financial products. They want to analyze threats unique to the ML pipeline using STRIDE. Which threat is LEAST applicable to the data collection and preprocessing stage?
⚠ Common exam trap
The AI0-001 exam often tests the candidate's ability to map STRIDE threats to the correct ML pipeline stage, and the trap here is that candidates mistakenly apply DoS to data collection because they think of 'overloading the data pipeline' rather than recognizing that DoS primarily targets the availability of the deployed model service.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Denial of Service (DoS)
Denial of Service (DoS) is least applicable to the data collection and preprocessing stage because DoS threats typically target the availability of the model serving infrastructure (e.g., API endpoints, inference servers) rather than the static data ingestion pipeline. In the ML pipeline, DoS is more relevant during model deployment and inference, where an attacker could overwhelm the system with requests, not during the collection or preprocessing of training data.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Tampering with training data
Why it's wrong here
Data poisoning is a tampering threat during preprocessing.
- ✗
Spoofing of data sources
Why it's wrong here
Spoofing is a valid threat at data collection if sources are impersonated.
- ✗
Information disclosure via data leakage
Why it's wrong here
Sensitive data could be leaked during collection or preprocessing.
- ✓
Denial of Service (DoS)
Why this is correct
Correct. DoS typically targets the serving infrastructure, not data collection.
About these practice questions
One of 754 original AI0-001 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.