Maswali yanayounganishwa na mwongozo · Ngumu Kiwango

AI katika Maswali ya Kujaribu Kupenya Kiotomatiki

Angalia jinsi mawakala wa kupima kalamu wa AI hupanga kutoka kwa hali ya mfumo unaozingatiwa, kutafsiri matokeo ya zana, na matokeo ya msururu huku ukiheshimu upeo ulioidhinishwa.

Njia za mwongozo zinazohusianaAI Katika Jaribio la Kupenya la Kiotomatiki
Swali 1 ya 8

Which phases does NIST’s technical guide include in a security testing and assessment process?

Hakiki kila swali8 maswali

Majibu na maelezo huonekana unapojibu maswali.

  1. Which phases does NIST’s technical guide include in a security testing and assessment process?
    • Planning, discovery, attack, and reporting
    • Model pretraining, fine-tuning, deployment, and monitoring
    • Data labeling, medical diagnosis, treatment, and follow-up
    • Design, advertising, checkout, and customer support
  2. Je, wakala wa kupima kalamu kulingana na LLM kwa kawaida hutumia 'mpangaji' kwa ajili gani?
    • Kupanga likizo ya wafanyikazi
    • Kuzingatia malengo na mfumo hali ya kuamua hatua zinazofuata za shambulio
    • Kubuni nembo ya kampuni
    • Kutuma barua pepe za uuzaji
  3. What is a goal of NIST target-vulnerability validation techniques?
    • Guarantee that an attacker will exploit every vulnerability
    • Replace the need to define test scope
    • Corroborate that a suspected vulnerability exists in the target environment
    • Automatically assign legal liability for a weakness
  4. Which sequence matches three enterprise tactics in MITRE ATT&CK?
    • Classification, Regression, then Clustering
    • Planning, Discovery, then Reporting
    • Encryption, Compression, then Backup
    • Initial Access, Privilege Escalation, then Lateral Movement
  5. Ni hatari gani kuu ya AI katika upimaji wa kupenya?
    • Mbinu sawa zinaweza kupunguza kizuizi kwa washambuliaji hasidi na mawakala wanaweza kusababisha usumbufu usiotarajiwa
    • Inafanya kompyuta kukimbia haraka
    • Inafanya kazi tu kwenye karatasi
    • Inaondoa hitaji la nywila
  6. What did the cited LLM penetration-testing benchmark evaluate?
    • Whether autonomous testing eliminates the need for authorization
    • How language models and a PentestGPT system performed on benchmark penetration-testing tasks
    • Whether every vulnerability can be exploited from noisy tool output
    • Whether AI testing is more common than annual manual testing
  7. In the guide’s attack-graph description, what do the nodes and edges represent?
    • Nodes are users, and edges are their email messages
    • Nodes are model layers, and edges are attention heads
    • Nodes are system states, and edges are exploits that can move between states
    • Nodes are vulnerabilities, and edges are severity labels
  8. Why does an AI pen-testing agent need human authorization and a defined scope?
    • Authorization makes scan results automatically accurate
    • Scope is needed only to improve language-model fluency
    • A defined scope guarantees every vulnerability is exploitable
    • Its offensive actions can disrupt systems, and testing must stay within approved targets