Câu 40: CY0-001: CompTIA SecAI+ Beta

A security analyst is aware of an active penetration test in the environment. The analyst examines security information and event management (SIEM) log data and notices the following output from the AI system: Which of the following is the vulnerability that has occurred and the control the analyst should implement?

1. A. The vulnerability is prompt injection, and the analyst should use endpoint detection response (EDR).
2. B. The vulnerability is model hallucinations, and the analyst should develop output validations.
3. C. The vulnerability is jailbreaking, and the analyst should utilize role-based access control.
4. D. The vulnerability is sensitive information disclosure, and the analyst should employ masking. — đáp án hiện tại
5. E. The vulnerability is role impersonation, and the analyst should use validation.