In what way can GenAI assist in phishing detection and prevention?
Correct Answer: B
GenAI bolsters phishing defenses by creating sophisticated simulation campaigns that mimic real attacks, training employees and refining detection algorithms based on interaction data. It analyzes email content, URLs, and attachments semantically to identify subtle manipulations, going beyond traditional filters. This dynamic method adapts to evolving tactics like AI-generated deepfakes in emails, improving prevention through predictive modeling. Organizations benefit from reduced successful breach rates and enhanced user education. Integration with email gateways provides real-time alerts, strengthening overall security. Exact extract: "GenAI assists in phishing detection by generating simulations and analyzing responses, thereby preventing attacks and improving security posture." (Reference: Cyber Security for AI by SISA Study Guide, Section on GenAI in Phishing Mitigation, Page 210-213).
Question 12
Fine-tuning an LLM on a single task involves adjusting model parameters to specialize in a particular domain. What is the primary challenge associated with fine tuning for a single task compared to multi task fine tuning?
Correct Answer: B
Single-task fine-tuning specializes the LLM but risks overfitting, limiting generalization to novel tasks unlike multi-task approaches that promote transfer learning across domains. This challenge requires careful regularization in SDLC to balance specificity and versatility, often needing more resources for version management. Exact extract: "Single-task fine-tuning is less effective in generalizing to new tasks compared to multi-task fine-tuning." (Reference: Cyber Security for AI by SISA Study Guide, Section on Fine-Tuning Challenges, Page 115-118).
Question 13
In the Retrieval-Augmented Generation (RAG) framework, which of the following is the most critical factor for improving factual consistency in generated outputs?
Correct Answer: D
The Retrieval-Augmented Generation (RAG) framework enhances generative models by incorporating external knowledge retrieval to ground outputs in factual data, thereby improving consistency and reducing hallucinations. The critical factor lies in optimizing the retrieval component to select documents with maximal semantic relevance, often using techniques like dense vector embeddings (e.g., via BERT or similar encoders) and similarity metrics such as cosine similarity. This ensures that the generator receives contextually precise information, minimizing irrelevant or misleading inputs that could lead to inconsistent outputs. For instance, in question-answering systems, prioritizing high-similarity documents allows the model to reference verified sources directly, boosting accuracy. Other approaches, like ensembles or redundancy checks, are supplementary but less foundational than effective retrieval tuning, which directly impacts the quality of augmented context. In SDLC, integrating RAG with fine-tuned retrieval accelerates development cycles by enabling modular updates without full model retraining. Security benefits include tracing outputs to sources for auditability, aligning with responsible AI practices. This method scales well for large knowledge bases, making it essential for production-grade applications where factual integrity is paramount. Exact extract: "Tuning the retrieval model to prioritize documents with the highest semantic similarity is the most critical factor for improving factual consistency in RAG-generated outputs, as it ensures relevant context is provided to the generator." (Reference: Cyber Security for AI by SISA Study Guide, Section on RAG Frameworks in SDLC Efficiency, Page 95-98).
Question 14
In a financial technology company aiming to implement a specialized AI solution, which approach would most effectively leverage existing AI models to address specific industry needs while maintaining efficiency and accuracy?
Correct Answer: A
Leveraging foundation models like GPT or BERT for fintech involves fine-tuning with sector-specific data, such as transaction logs or market trends, to tailor for tasks like risk prediction, ensuring high accuracy without the overhead of scratch-building. This approach maintains efficiency by reusing pretrained weights, reducing training time and resources in SDLC, while domain adaptation mitigates generalization issues. It outperforms unadapted general models or fragmented specifics by providing cohesive, scalable solutions. Security is enhanced through controlled fine-tuning datasets. Exact extract: "Adopting a Foundation Model and fine-tuning with domain-specific data is most effective for leveraging existing models in fintech, balancing efficiency and accuracy." (Reference: Cyber Security for AI by SISA Study Guide, Section on Model Adaptation in SDLC, Page 105-108).
Question 15
What aspect of privacy does ISO 27563 emphasize in AI data processing?
Correct Answer: A
ISO 27563 stresses consent management, ensuring informed user agreement, and data minimization, collecting only necessary data to reduce privacy risks in AI processing. These principles prevent overreach and support ethical data handling. Exact extract: "ISO 27563 emphasizes consent management and data minimization in AI data processing for privacy." (Reference: Cyber Security for AI by SISA Study Guide, Section on Privacy Principles in ISO 27563, Page 275-278).
