CAS-004 practice question 2 of 35

A security engineer is performing a threat modeling procedure against a machine learning system that correlates analytic information for decision support. Which of the following threat statements most likely applies to this type of system?

Full set: 610 questions

Answer options

A: An attacker is able to overload the system with incorrect information. Correct answer

B: An attacker conducts a password-spraying attack against the system's authentication method.

C: An attacker exploits a server-side request forgery attack.

D: An attacker accesses information that should not be disclosed due to an authorization error.

Correct Answer:

A. An attacker is able to overload the system with incorrect information.

Explanation

Overloading a machine learning system with incorrect information is an example of poisoning the data set, which can compromise the integrity of decision-making processes. This aligns with CASP+ objective 2.3, which involves threat modeling and mitigating risks associated with AI and ML systems. ________________________________________

Keep practicing

Take the free CAS-004 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test