Idanwo ti o sopọ mọ itọsọna · Lile Ipele

AI ninu Idanwo Ilaluja Aládàáṣiṣẹ

Check how AI pen-testing agents plan from observed system state, interpret tool output, and chain findings while respecting authorized scope.

Jẹmọ itọsọna awọn ọnaAI Ninu Idanwo Ilaluja Aifọwọyi
Ibeere 1 ti 8

Which phases does NIST’s technical guide include in a security testing and assessment process?

Awotẹlẹ gbogbo ibeere8 ibeere

Awọn idahun ati awọn alaye han bi o ṣe n mu ibeere naa.

  1. Which phases does NIST’s technical guide include in a security testing and assessment process?
    • Planning, discovery, attack, and reporting
    • Model pretraining, fine-tuning, deployment, and monitoring
    • Data labeling, medical diagnosis, treatment, and follow-up
    • Design, advertising, checkout, and customer support
  2. Kini aṣoju idanwo peni ti o da lori LLM nigbagbogbo lo 'oluṣeto' fun?
    • Ṣiṣeto awọn isinmi oṣiṣẹ
    • Idiyele lori awọn ibi-afẹde ati ipo eto lati pinnu awọn igbesẹ ikọlu atẹle
    • Ṣiṣeto aami ile-iṣẹ naa
    • Fifiranṣẹ awọn imeeli tita
  3. What is a goal of NIST target-vulnerability validation techniques?
    • Guarantee that an attacker will exploit every vulnerability
    • Replace the need to define test scope
    • Corroborate that a suspected vulnerability exists in the target environment
    • Automatically assign legal liability for a weakness
  4. Which sequence matches three enterprise tactics in MITRE ATT&CK?
    • Classification, Regression, then Clustering
    • Planning, Discovery, then Reporting
    • Encryption, Compression, then Backup
    • Initial Access, Privilege Escalation, then Lateral Movement
  5. Kini eewu bọtini ti AI ni idanwo ilaluja?
    • Awọn ilana kanna le dinku idena fun awọn ikọlu irira ati awọn aṣoju le fa idalọwọduro airotẹlẹ
    • O mu ki awọn kọmputa ṣiṣẹ yiyara
    • O ṣiṣẹ nikan lori iwe
    • O ti jade ni nilo fun awọn ọrọigbaniwọle
  6. What did the cited LLM penetration-testing benchmark evaluate?
    • Whether autonomous testing eliminates the need for authorization
    • How language models and a PentestGPT system performed on benchmark penetration-testing tasks
    • Whether every vulnerability can be exploited from noisy tool output
    • Whether AI testing is more common than annual manual testing
  7. In the guide’s attack-graph description, what do the nodes and edges represent?
    • Nodes are users, and edges are their email messages
    • Nodes are model layers, and edges are attention heads
    • Nodes are system states, and edges are exploits that can move between states
    • Nodes are vulnerabilities, and edges are severity labels
  8. Why does an AI pen-testing agent need human authorization and a defined scope?
    • Authorization makes scan results automatically accurate
    • Scope is needed only to improve language-model fluency
    • A defined scope guarantees every vulnerability is exploitable
    • Its offensive actions can disrupt systems, and testing must stay within approved targets