[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-310646-105":3,"detail-sidebar-cat-0-en-105":81,"doc-detail-310646-en":131},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","comptia-secai-cy0-001-practice-questions","CompTIA SecAI+ CY0-001 Practice Questions","","Practice question set for the CompTIA SecAI+ CY0-001 exam, focused on securing generative AI chatbot and AI system operations. Covers the most impactful risk—data leakage—its causes such as prompt injection, insufficient output filtering, and sensitive training-data reproduction. Explains compensating controls including LLM firewalls for prompt security and output sanitization, plus the role of prompt firewalls for input validation. Provides multiple-choice scenarios with rationale for correct and incorrect options.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/document/","Document",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/document/exam/","Exam",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/document/comptia-secai-cy0-001-practice-questions/310646/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/comptia-secai-cy0-001-practice-questions/310646.png","ImageObject",300,407,{"name":42,"@type":43},"Mason","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-31","2026-09-20",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",12,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"What is the most impactful security risk when using a generative AI chatbot?","Question",{"text":63,"@type":64},"Data leakage is identified as the primary security concern. It can expose PII, confidential business data, intellectual property, training data, or system configurations through issues like prompt injection and insufficient filtering.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"Which compensating control helps prevent prompt injection and ensure sanitized outputs?",{"text":68,"@type":64},"An LLM firewall. It inspects and filters both incoming prompts and outgoing AI responses, blocking prompt injection attempts and sanitizing outputs for sensitive or harmful content.",{"name":70,"@type":61,"acceptedAnswer":71},"Which control should validate input for an AI security mechanism?",{"text":72,"@type":64},"A prompt firewall. It validates incoming inputs by inspecting semantic content and structure against security policies, blocking malicious patterns before the model processes them.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},310646,1790527048,{"code":4,"msg":82,"data":83},"success",[84,88,92,95,100,105,110,115,120,123,127],{"id":22,"doc_module":4,"doc_module_name":25,"category_name":85,"show_sort_weight":86,"slug":87},"Story & Novel",90,"story-novel",{"id":26,"doc_module":4,"doc_module_name":25,"category_name":89,"show_sort_weight":90,"slug":91},"Literature",80,"literature",{"id":33,"doc_module":4,"doc_module_name":25,"category_name":29,"show_sort_weight":93,"slug":94},70,"exam",{"id":96,"doc_module":4,"doc_module_name":25,"category_name":97,"show_sort_weight":98,"slug":99},5,"Comic",60,"comic",{"id":101,"doc_module":4,"doc_module_name":25,"category_name":102,"show_sort_weight":103,"slug":104},6,"Technology",50,"technology",{"id":106,"doc_module":4,"doc_module_name":25,"category_name":107,"show_sort_weight":108,"slug":109},7,"Healthcare",40,"healthcare",{"id":111,"doc_module":4,"doc_module_name":25,"category_name":112,"show_sort_weight":113,"slug":114},8,"Research & Report",30,"research-report",{"id":116,"doc_module":4,"doc_module_name":25,"category_name":117,"show_sort_weight":118,"slug":119},9,"Religion & Spirituality",20,"religion-spirituality",{"id":118,"doc_module":4,"doc_module_name":25,"category_name":121,"show_sort_weight":118,"slug":122},"World Cup","world-cup",{"id":124,"doc_module":4,"doc_module_name":25,"category_name":125,"show_sort_weight":124,"slug":126},10,"Lifestyle","lifestyle",{"id":128,"doc_module":4,"doc_module_name":25,"category_name":129,"show_sort_weight":96,"slug":130},19,"General","general",{"code":4,"msg":82,"data":132},{"doc_id":79,"user_id":133,"nickname":42,"user_avatar":134,"doc_module":4,"category_id":33,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":135,"file_id":136,"file_url":137,"file_type":138,"file_size":139,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":140,"language":141,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":142,"faqs":143,"seo_title":144,"seo_description":12,"update_tm":145,"read_time":146,"preview_page_count":4},5909887256941,"https://ap-avatar.wpscdn.com/davatar_9964176cb1d06d4a9deccf72a44ae3dc","# CompTIA SecAI+ CY0-001 Practice Questions\n\nShared by Fowler on 13-08-2026  \n# For More Free Questions and Preparation Resources\n\nCheck the Links on Last Page  \nQuestion 1  \nQuestion Type: MultipleChoice  \nWhich of the following is the most impactful security risk associated with the use of a generativeAI chatbot?  \nOptions:  \n\n| A- Overly permissive accessB- Data leakage  \u003Cbr>C- Weak encryption  \u003Cbr>D- Model validation  \u003Cbr>Answer:   |\n| --- |\n| B  \u003Cbr>Explanation:   |\n\nBasic Concept: Generative AI chatbots interact with users in natural language and may accessorganizational knowledge bases, databases, or prior conversations. The conversational nature ofthese systems creates unique risks around sensitive information disclosure. CompTIA SecAI+Study Guide ranks data leakage as the primary security concern for generative AI chatbots.  \nWhy B is Correct: Data leakage occurs when a generative AI chatbot inadvertently revealssensitive information including PII, confidential business data, intellectual property, trainingdata, or system configurations in its responses. This can happen through prompt injectionattacks, insufficient output filtering, or the model memorizing and reproducing sensitivetraining data. The impact is immediate, potentially irreversible, and can result in regulatoryviolations, competitive disadvantage, and reputational damage.  \nWhy A is Wrong: Overly permissive access is a contributing factor that can exacerbate dataleakage but is an access control design issue rather than the most directly impactful runtimerisk of operating a generative AI chatbot.  \nWhy C is Wrong: Weak encryption is a data protection concern for data in transit or at rest.While important, it is a configuration issue separate from the generative AI chatbot's coreoperational risks and is not specific to chatbot technology.  \nWhy D is Wrong: Model validation ensures a model performs as expected before deployment.While important for quality assurance, it is a development lifecycle activity rather than anongoing operational security risk associated with running a chatbot.  \nQuestion 2  \nQuestion Type: MultipleChoice  \nA security administrator wants to prevent prompt injection attacks and ensure responses havesanitized output.  \nWhich of the following provides a main compensating control for these requirements?  \n## Options:\n\nA- Least privilegeB- EncryptionC- A large language model (LLM) firewallD- Rate limiting  \n## Answer:\n\nC  \n## Explanation:\n\nBasic Concept: Preventing prompt injection and ensuring output sanitization requires a controlthat can inspect both the semantic content of incoming prompts and the safety of outgoingresponses. This requires an intelligent, context-aware filtering layer specifically designed forLLM traffic. CompTIA SecAI+ Study Guide identifies LLM firewalls as a primary control forprompt security and output safety.  \nWhy C is Correct: An LLM firewall is specifically designed to inspect, filter, and sanitize bothincoming prompts and outgoing AI responses. It can detect and block prompt injection attemptsusing pattern matching, semantic analysis, and behavioral heuristics, while also sanitizingoutput to remove sensitive data, harmful content, or policy violations before responses reachusers. This dual capability makes it the primary control addressing both requirementssimultaneously.  \nWhy A is Wrong: Least privilege restricts what resources and actions users and systems canaccess. It reduces the potential impact of successful attacks but does not inspect promptcontent for injection attempts or sanitize model outputs.  \nWhy B is Wrong: Encryption protects data confidentiality in transit and at rest. It does notanalyze prompt content for malicious patterns or filter AI-generated responses for unsafecontent. Encrypted traffic can still carry prompt injection attacks.  \nWhy D is Wrong: Rate limiting controls request frequency. While it can slow down automatedinjection attack campaigns, it does not inspect the content of ind","cbCaidvaH1uPFFUM","https://ap.wps.com/l/cbCaidvaH1uPFFUM","pdf",1254484,17,"English","# CompTIA SecAI+ CY0-001 Practice Questions\n## Question 1\n## Question 2\n## Question 3","[{\"question\":\"What is the most impactful security risk when using a generative AI chatbot?\",\"answer\":\"Data leakage is identified as the primary security concern. It can expose PII, confidential business data, intellectual property, training data, or system configurations through issues like prompt injection and insufficient filtering.\"},{\"question\":\"Which compensating control helps prevent prompt injection and ensure sanitized outputs?\",\"answer\":\"An LLM firewall. It inspects and filters both incoming prompts and outgoing AI responses, blocking prompt injection attempts and sanitizing outputs for sensitive or harmful content.\"},{\"question\":\"Which control should validate input for an AI security mechanism?\",\"answer\":\"A prompt firewall. It validates incoming inputs by inspecting semantic content and structure against security policies, blocking malicious patterns before the model processes them.\"}]","CompTIA SecAI+ CY0-001 Practice Questions | PDF",1789885804,43]