1. What is Least privilege ? Junior A. mutual TLS where client and server both present certificates, authenticating service-to-service traffic B. masking, encrypting or tokenizing personally identifiable information to meet privacy regulation C. storing credentials in a vault and injecting them at runtime instead of hardcoding them D. granting an identity only the minimum permissions needed, limiting blast radius if compromised
2. Which term means: "granting an identity only the minimum permissions needed, limiting blast radius if compromised"? Junior A. Prompt injection B. Least privilege C. Secrets management D. Network segmentation
3. Which statement is correct? Junior A. Least privilege — mutual TLS where client and server both present certificates, authenticating service-to-service traffic B. Least privilege — an auditable record of which data and code produced a model, required for regulated AI governance C. Least privilege — an attack where crafted input overrides an LLM's instructions to leak data or perform unintended actions D. Least privilege — granting an identity only the minimum permissions needed, limiting blast radius if compromised
4. What is Secrets management ? Junior A. masking, encrypting or tokenizing personally identifiable information to meet privacy regulation B. granting an identity only the minimum permissions needed, limiting blast radius if compromised C. role-based access control granting permissions to roles that users or service accounts are bound to D. storing credentials in a vault and injecting them at runtime instead of hardcoding them
5. Which term means: "storing credentials in a vault and injecting them at runtime instead of hardcoding them"? Junior A. PII handling B. Secrets management C. RBAC D. Model and data lineage
6. Which statement is correct? Junior A. Secrets management — isolating workloads into separate subnets/zones so a breach in one cannot reach the others B. Secrets management — masking, encrypting or tokenizing personally identifiable information to meet privacy regulation C. Secrets management — granting an identity only the minimum permissions needed, limiting blast radius if compromised D. Secrets management — storing credentials in a vault and injecting them at runtime instead of hardcoding them
7. What is mTLS ? Mid A. masking, encrypting or tokenizing personally identifiable information to meet privacy regulation B. isolating workloads into separate subnets/zones so a breach in one cannot reach the others C. mutual TLS where client and server both present certificates, authenticating service-to-service traffic D. an auditable record of which data and code produced a model, required for regulated AI governance
8. Which term means: "mutual TLS where client and server both present certificates, authenticating service-to-service traffic"? Mid A. Network segmentation B. Secrets management C. mTLS D. Prompt injection
9. Which statement is correct? Mid A. mTLS — an auditable record of which data and code produced a model, required for regulated AI governance B. mTLS — mutual TLS where client and server both present certificates, authenticating service-to-service traffic C. mTLS — an attack where crafted input overrides an LLM's instructions to leak data or perform unintended actions D. mTLS — masking, encrypting or tokenizing personally identifiable information to meet privacy regulation
10. What is RBAC ? Mid A. an attack where crafted input overrides an LLM's instructions to leak data or perform unintended actions B. masking, encrypting or tokenizing personally identifiable information to meet privacy regulation C. role-based access control granting permissions to roles that users or service accounts are bound to D. an auditable record of which data and code produced a model, required for regulated AI governance
11. Which term means: "role-based access control granting permissions to roles that users or service accounts are bound to"? Mid A. Least privilege B. Model and data lineage C. mTLS D. RBAC
12. Which statement is correct? Mid A. RBAC — isolating workloads into separate subnets/zones so a breach in one cannot reach the others B. RBAC — role-based access control granting permissions to roles that users or service accounts are bound to C. RBAC — storing credentials in a vault and injecting them at runtime instead of hardcoding them D. RBAC — an auditable record of which data and code produced a model, required for regulated AI governance
13. What is PII handling ? Mid A. an auditable record of which data and code produced a model, required for regulated AI governance B. storing credentials in a vault and injecting them at runtime instead of hardcoding them C. masking, encrypting or tokenizing personally identifiable information to meet privacy regulation D. mutual TLS where client and server both present certificates, authenticating service-to-service traffic
14. Which term means: "masking, encrypting or tokenizing personally identifiable information to meet privacy regulation"? Mid A. Network segmentation B. PII handling C. Least privilege D. mTLS
15. Which statement is correct? Mid A. PII handling — mutual TLS where client and server both present certificates, authenticating service-to-service traffic B. PII handling — masking, encrypting or tokenizing personally identifiable information to meet privacy regulation C. PII handling — an auditable record of which data and code produced a model, required for regulated AI governance D. PII handling — storing credentials in a vault and injecting them at runtime instead of hardcoding them
16. What is Network segmentation ? Mid A. mutual TLS where client and server both present certificates, authenticating service-to-service traffic B. an auditable record of which data and code produced a model, required for regulated AI governance C. isolating workloads into separate subnets/zones so a breach in one cannot reach the others D. an attack where crafted input overrides an LLM's instructions to leak data or perform unintended actions
17. Which term means: "isolating workloads into separate subnets/zones so a breach in one cannot reach the others"? Mid A. mTLS B. Least privilege C. Prompt injection D. Network segmentation
18. Which statement is correct? Mid A. Network segmentation — role-based access control granting permissions to roles that users or service accounts are bound to B. Network segmentation — isolating workloads into separate subnets/zones so a breach in one cannot reach the others C. Network segmentation — mutual TLS where client and server both present certificates, authenticating service-to-service traffic D. Network segmentation — storing credentials in a vault and injecting them at runtime instead of hardcoding them
19. What is Prompt injection ? Senior A. an attack where crafted input overrides an LLM's instructions to leak data or perform unintended actions B. storing credentials in a vault and injecting them at runtime instead of hardcoding them C. mutual TLS where client and server both present certificates, authenticating service-to-service traffic D. an auditable record of which data and code produced a model, required for regulated AI governance
20. Which term means: "an attack where crafted input overrides an LLM's instructions to leak data or perform unintended actions"? Senior A. Model and data lineage B. RBAC C. mTLS D. Prompt injection
21. Which statement is correct? Senior A. Prompt injection — storing credentials in a vault and injecting them at runtime instead of hardcoding them B. Prompt injection — role-based access control granting permissions to roles that users or service accounts are bound to C. Prompt injection — an attack where crafted input overrides an LLM's instructions to leak data or perform unintended actions D. Prompt injection — an auditable record of which data and code produced a model, required for regulated AI governance
22. What is Model and data lineage ? Senior A. granting an identity only the minimum permissions needed, limiting blast radius if compromised B. an auditable record of which data and code produced a model, required for regulated AI governance C. role-based access control granting permissions to roles that users or service accounts are bound to D. storing credentials in a vault and injecting them at runtime instead of hardcoding them
23. Which term means: "an auditable record of which data and code produced a model, required for regulated AI governance"? Senior A. RBAC B. Secrets management C. Model and data lineage D. Network segmentation
24. Which statement is correct? Senior A. Model and data lineage — role-based access control granting permissions to roles that users or service accounts are bound to B. Model and data lineage — masking, encrypting or tokenizing personally identifiable information to meet privacy regulation C. Model and data lineage — an auditable record of which data and code produced a model, required for regulated AI governance D. Model and data lineage — mutual TLS where client and server both present certificates, authenticating service-to-service traffic