Courseiva
AI Infrastructure and TechnologieshardMultiple SelectObjective-mapped

AI0-001 AI Infrastructure and Technologies Practice Question

An organisation is deploying a fine-tuned LLM for internal use. They need to ensure the API endpoint is secure and cost-effective. Which TWO measures should they implement? (Choose 2)

⚠ Common exam trap

The CompTIA AI+ exam tests the distinction between security measures (authentication, rate limiting) and non-security features (content filtering, protocol choice), leading candidates to mistakenly select content filtering or gRPC as security controls.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Implement API key authentication

API key authentication (Option A) is a fundamental security measure that ensures only authorized clients can access the LLM endpoint. It provides a simple, lightweight mechanism to validate requests without the overhead of full OAuth, making it both secure and cost-effective for internal deployments.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Implement API key authentication

    Why this is correct

    API keys restrict access to authorised clients.

  • Enable content filtering

    Why it's wrong here

    Content filtering moderates outputs but does not secure access or control costs.

  • Disable logging to reduce storage costs

    Why it's wrong here

    Disabling logging may save storage but compromises security auditing and debugging.

  • Apply rate limiting per user

    Why this is correct

    Rate limiting prevents excessive usage, controlling costs and ensuring fair access.

  • Use gRPC instead of REST

    Why it's wrong here

    gRPC is a protocol choice that does not inherently improve security or cost control.

About these practice questions

One of 754 original AI0-001 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.