CompTIA · SecAI+ CY0-001
Access controls for AI
SecAI+ CY0-001 · Lesson 7 of 18 · 53:35
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the CompTIA SecAI+ CY0-001 exam. In this lesson: access to models (who can call, change, or copy them), access to data, access for AI agents (their own identities, least privilege, approvals), and network and API access (private endpoints, mutual TLS, keys and tokens), with Fernhill Telecom as the running example. Includes three original practice questions.
Preview the topics
- Fernhill’s assistant retrieves documents with a service account that can open every file, and a support agent gets a summary of a merger memo. Which control is missing?
- A support agent can read bills, change prices, and delete accounts, although its only task is to explain bills. Which principle is broken?
- Fernhill’s fraud model can be reached from the internet, with no authentication, because it was meant for internal testing only. What is the best first fix?