Exactprep CY0-001 Questions

Basic Concept: When a non-ML engineer can accidentally trigger model retraining during a UI update, this indicates a lack of proper lifecycle management and change controls around the AI model. Uncontrolled retraining on unverified data is a critical vulnerability in the development and deployment process. CompTIA SecAI+ Study Guide identifies the Model Development Life Cycle as the framework for preventing such issues.

Why C is Correct: Implementing a Model Development Life Cycle (MDLC) establishes formal, controlled processes for every stage of model development and updates including data validation requirements before training, change management gates, testing and validation stages, and separation of duties between UI development and model training activities. An MDLC would have prevented the accidental retraining by requiring explicit, controlled authorization before any model training occurs.

Why A is Wrong: A WAF filters HTTP traffic at the application boundary. It does not govern internal development processes or control when and how model retraining occurs within the AI development pipeline.

Why B is Wrong: Role-based access control can restrict who has permission to trigger model retraining, which would help prevent this specific incident. However, it is one component of a broader MDLC governance framework and does not address data validation, testing stages, or the complete change management process.

Why D is Wrong: A GAN is a model architecture for generating synthetic data. It is a training technique unrelated to lifecycle governance or preventing accidental retraining from unverified data during unrelated application updates.

Basic Concept: Prompting techniques for LLMs include various approaches to guide model behavior. Providing examples within prompts is a powerful technique that leverages the model ' s in-context learning capability to guide response format and quality. CompTIA SecAI+ Study Guide covers prompting techniques under basic AI concepts.

Why E is Correct: One-shot prompting involves providing exactly one example within a prompt to demonstrate to the model the desired input-output format or response style. This single example guides the model ' s understanding of the task without requiring extensive fine-tuning. It is a well-established prompting technique that uses examples to inform model behavior.

Why F is Correct: Multi-shot prompting (also called few-shot prompting) involves providing multiple examples within a prompt to further clarify the desired output pattern. Multiple examples help the model identify consistent patterns and produce more accurate, consistent responses. Both one-shot and multi-shot are specifically defined by their use of examples in prompts.

Why A is Wrong: A user prompt is the input message submitted by a user to the AI system. It is the general term for any user input, not a specific technique that describes the practice of providing examples.

Why B is Wrong: A system prompt sets the model ' s behavior, persona, and constraints at the session level. While a system prompt could contain examples, the term specifically refers to the system-level instruction context, not the technique of example provision.

Why C is Wrong: A prompt template is a reusable structured format with placeholders for variable inputs. It standardizes prompt structure but is not defined by the practice of including examples.

Why D is Wrong: Quantization is a model compression technique that reduces model size by representing weights with lower precision numbers. It is a model optimization technique completely unrelated to prompting practices.

Option B is correct because a human resources AI application processes highly sensitive employee and applicant information and may influence consequential employment decisions. Privacy and security therefore determine whether the system can be deployed responsibly. The design must address data minimization, lawful collection, access control, encryption, retention, auditability, secure model integration, and protection against unauthorized disclosure. It should also evaluate whether training data or outputs expose protected or confidential information and whether human review is required before decisions affect candidates or employees. Option A concerns friendliness and presentation, not the protection of people or organizational data. Option C may improve usability, but visual design cannot compensate for insecure handling of resumes, performance records, or identity data. Option D can make outputs easier to consume, yet brevity and summarization do not control privacy risk or system compromise. The NIST AI Risk Management Framework identifies privacy enhancement, security, resilience, accountability, and transparency as characteristics of trustworthy AI, making privacy and security the controlling considerations in this scenario.

================

Overfitting is the principal risk when a model is trained for too many epochs on the same training data. An epoch represents one complete pass through the training dataset. CompTIA SecAI+ includes epochs under fine-tuning and model-training techniques, making the relationship between repeated training and model performance an important foundational concept. During appropriate training, repeated epochs allow the model to learn useful patterns. However, excessive training can cause the model to fit not only meaningful relationships but also noise, anomalies, and idiosyncrasies in the training set. The model can then perform extremely well against familiar training samples while generalizing poorly to previously unseen data. This condition is overfitting. Output unpredictability is not the defining consequence of excessive epochs. Insufficient system-usage monitoring is an operational observability problem and has no direct relationship to the number of training epochs. Unit testing concerns software and pipeline validation rather than statistical generalization. Proper controls include validation datasets, evaluation throughout training, early stopping, regularization, and monitoring the divergence between training and validation performance. Therefore, overfitting is the most technically accurate answer.

================