AI0-001 AI Security Practice Question
An organization is adopting a third-party pre-trained language model for internal use. To assess supply chain security, which document should they request to understand the components and dependencies of the model?
⚠ Common exam trap
The AI0-001 exam often tests the distinction between a model card (which describes model behavior) and an SBOM (which describes software components), leading candidates to mistakenly choose the model card for supply chain security questions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Software Bill of Materials (SBOM)
A Software Bill of Materials (SBOM) is the correct document for assessing supply chain security because it provides a detailed, machine-readable inventory of all components, libraries, and dependencies used to build the model. This allows the organization to identify known vulnerabilities, licensing risks, and transitive dependencies, which is essential for evaluating the security posture of a third-party pre-trained model.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
OWASP LLM Top 10
Why it's wrong here
The OWASP LLM Top 10 is a list of common vulnerabilities, not a component inventory.
- ✗
Model card
Why it's wrong here
A model card describes the model's intended use and limitations but not its software dependencies.
- ✗
Data flow diagram
Why it's wrong here
A data flow diagram shows how data moves, not the components of the model itself.
- ✓
Software Bill of Materials (SBOM)
Why this is correct
An SBOM lists all third-party components, libraries, and dependencies, enabling supply chain risk assessment.
About these practice questions
This AI0-001 question is part of Courseiva's 754-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.