Kedis ku xidhan hagaha · Adag Heerka

AI oo ku jira Kediska Tijaabada Gelitaanka Toos ah

Hubi sida wakiilada qalin-jabinta AI ay uga qorsheeyaan nidaamka la arkay, tarjumaan wax soo saarka qalabka, iyo natiijooyinka silsiladda iyadoo la ixtiraamayo baaxadda la oggol yahay.

Wadooyinka haga ee la xidhiidhaAI ee Tijaabada Gelitaanka Toos ah
Su'aal 1 ee 8

Which phases does NIST’s technical guide include in a security testing and assessment process?

Horudhac su'aal kasta8 su'aalo

Jawaabaha iyo sharraxaadaha waxay soo baxayaan markaad qaadanayso kediska.

  1. Which phases does NIST’s technical guide include in a security testing and assessment process?
    • Planning, discovery, attack, and reporting
    • Model pretraining, fine-tuning, deployment, and monitoring
    • Data labeling, medical diagnosis, treatment, and follow-up
    • Design, advertising, checkout, and customer support
  2. Muxuu wakiilka qalinka ku salaysan ee LLM caadi ahaan u isticmaalo 'qorsheeyaha'?
    • Jadwalka fasaxyada shaqaalaha
    • Sababaynta hadafyada iyo nidaamka gobolka si loo go'aamiyo tillaabooyinka soo socda ee weerarka
    • Naqshadaynta astaanta shirkadda
    • Diraya iimaylo suuqgeyneed
  3. What is a goal of NIST target-vulnerability validation techniques?
    • Guarantee that an attacker will exploit every vulnerability
    • Replace the need to define test scope
    • Corroborate that a suspected vulnerability exists in the target environment
    • Automatically assign legal liability for a weakness
  4. Which sequence matches three enterprise tactics in MITRE ATT&CK?
    • Classification, Regression, then Clustering
    • Planning, Discovery, then Reporting
    • Encryption, Compression, then Backup
    • Initial Access, Privilege Escalation, then Lateral Movement
  5. Waa maxay khatarta muhiimka ah ee AI ee baaritaanka galitaanka?
    • Farsamooyinka isku midka ah ayaa hoos u dhigi kara xannibaadda weerarrada xaasidnimada leh iyo wakiillada ayaa laga yaabaa inay keenaan carqalad aan loo baahnayn
    • Waxay ka dhigtaa kumbiyuutarrada inay si degdeg ah u shaqeeyaan
    • Waxa kaliya oo ay ku shaqeysaa warqad
    • Waxay meesha ka saartaa baahida furaha sirta ah
  6. What did the cited LLM penetration-testing benchmark evaluate?
    • Whether autonomous testing eliminates the need for authorization
    • How language models and a PentestGPT system performed on benchmark penetration-testing tasks
    • Whether every vulnerability can be exploited from noisy tool output
    • Whether AI testing is more common than annual manual testing
  7. In the guide’s attack-graph description, what do the nodes and edges represent?
    • Nodes are users, and edges are their email messages
    • Nodes are model layers, and edges are attention heads
    • Nodes are system states, and edges are exploits that can move between states
    • Nodes are vulnerabilities, and edges are severity labels
  8. Why does an AI pen-testing agent need human authorization and a defined scope?
    • Authorization makes scan results automatically accurate
    • Scope is needed only to improve language-model fluency
    • A defined scope guarantees every vulnerability is exploitable
    • Its offensive actions can disrupt systems, and testing must stay within approved targets