AI0-001 AI Security Practice Question
An organization wants to detect if someone is trying to steal their proprietary machine learning model by querying its API. Which monitoring technique is MOST effective?
⚠ Common exam trap
Watch out — candidates often confuse generic security controls (rate limiting, input validation) with the specific detection technique needed for model extraction, overlooking that extraction attacks use legitimate, well-formed queries in a systematic pattern.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Monitoring for anomalous query patterns, such as high volume or systematic variations
Model extraction attacks rely on systematically querying the API to reconstruct the model's decision boundary. Monitoring for anomalous query patterns—such as high request volume, uniform input distributions, or systematic variations (e.g., grid-like sampling of feature space)—directly detects the behavioral signature of extraction attempts, unlike passive controls that do not address the attack vector.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Output filtering to remove sensitive information from responses
Why it's wrong here
Output filtering protects against data leakage but does not detect extraction.
- ✗
Rate limiting on the number of API requests per user
Why it's wrong here
Rate limiting reduces extraction speed but does not detect the attack.
- ✓
Monitoring for anomalous query patterns, such as high volume or systematic variations
Why this is correct
Anomaly detection can identify extraction attempts by spotting unusual patterns.
- ✗
Input validation to reject malformed requests
Why it's wrong here
Input validation does not detect extraction.
About these practice questions
One of 754 original AI0-001 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.