A penetration tester is assessing the controls of a deployed AI system that is designed to search and return the contents of files. The tester runs the following: Which of the following is the best…

The correct answer is D. Reducing the privilege scope of the service account. The penetration test shows that the system accepts arbitrary commands like deleteBuckets or listPermissions, which could lead to privilege abuse. The most effective control is least privilege, ensuring the service account only has access to what is strictly necessary (e.g…

Vulnerability Management

Question

A penetration tester is assessing the controls of a deployed AI system that is designed to search and return the contents of files. The tester runs the following:

Which of the following is the best control to prevent abuse of the system?

Exhibit

Options

AImplementing custom detection rules for anomalous model behavior
BSegmenting the workload into a separate virtual private cloud (VPC)
CAdding a large language model (LLM) guardrails library to the application code
DReducing the privilege scope of the service account

How the community answered

(21 responses)

A
5% (1)
B
19% (4)
C
10% (2)
D
67% (14)

Explanation

The penetration test shows that the system accepts arbitrary commands like deleteBuckets or listPermissions, which could lead to privilege abuse. The most effective control is least privilege, ensuring the service account only has access to what is strictly necessary (e.g., reading files) and not sensitive operations like deleting buckets or altering permissions.

Topics

#least privilege#AI system security#service account#privilege reduction

Community Discussion

No community discussion yet for this question.

Full CY0-001 Practice