AI0-001 AI Security Practice Question
An organization is deploying a machine learning model that classifies loan applications. They want to prevent an attacker from reconstructing individual customer records from the model's predictions. Which type of attack should they defend against?
⚠ Common exam trap
CompTIA often tests the distinction between model inversion (reconstructing data) and membership inference (detecting presence of data), so the trap here is confusing the goal of reconstructing records with simply inferring membership.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Model inversion
Model inversion attacks allow an attacker to reconstruct the original training data by analyzing the model's predictions. In this scenario, the attacker could use the model's outputs to infer sensitive details about individual loan applicants, such as income or credit history, violating privacy. Defending against model inversion is critical when predictions can be used to reverse-engineer private training records.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Membership inference
Why it's wrong here
Membership inference determines whether a specific record was in the training set, not reconstructing the record's attribute values. It is tempting because it is a privacy attack on model predictions, but it is the correct choice when the concern is leaking whether an individual's data was used in training.
- ✗
Data poisoning
Why it's wrong here
Data poisoning corrupts training data to degrade or bias the model's learned behaviour, and does not reconstruct records from predictions. It is tempting because it targets the model's integrity, but it is the correct choice when the threat is an attacker manipulating the training set to influence outputs.
- ✓
Model inversion
Why this is correct
Model inversion reconstructs training data by querying predictions, directly threatening the customer records in the loan classifier. It differs from membership inference, which only determines whether a record was used. Limiting prediction confidence and adding noise to outputs mitigates this specific reconstruction risk.
- ✗
Adversarial example
Why it's wrong here
Adversarial examples are inputs crafted to make the model misclassify at inference time; they do not reconstruct training records from predictions. It is tempting because both concern model outputs, but adversarial robustness is the correct defence when the goal is preventing manipulated inputs from causing wrong classifications.
About these practice questions
This AI0-001 question is part of Courseiva's 962-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.