About the SecAI+Exam

CompTIA
SecAI+ CY0-001

  • Exam length: 60 minutes maximum
  • Maximum of 60 questions
  • Performance-based questions appear first, followed by multiple choice
  • 2–4 Performance-based Questions/Simulations
  • Mostly multiple choice with a single answer
  • Only 1–3 multiple-answer multiple-choice questions
  • Mark and review: Yes
  • Go back and change answers: Yes
  • Real exam cost: About $359
  • Passing score: 600 (on a scale of 100–900) about 63%

Domains covered:

  • Domain 1: Basic AI Concepts Related to Cybersecurity
  • Domain 2: Securing AI Systems
  • Domain 3: AI-assisted Security
  • Domain 4: AI Governance, Risk, and Compliance

EXAM REVIEW – WHAT YOU NEED TO KNOW

Exam Content

The difficulty of CY0-001 is moderate, but seems to assume you already have Security+ (The original) behind you.  It definitely tests on material outside the scope of the official Objectives and courseware. The exam assumes you already have a security foundation and then tests how well you can apply AI terminology, controls, and governance.

New and heavily tested on this version (CY0-001):

  • AI types and techniques, including ML, deep learning, transformers, NLP, LLMs, SLMs, and GANs
  • Prompt engineering, model training, fine-tuning, and the AI lifecycle
  • Knowing threat systems and models (STRIDE, DREAD, ATLAS) and security frameworks
  • Attacks against AI systems, such as prompt injection, jailbreaking, poisoning, model inversion, and excessive agency
  • Controls such as guardrails, prompt firewalls, access control, encryption, and secure AI deployment
  • Using AI tools to support detection, analysis, and security operations
  • AI governance, risk, and compliance, including EU AI Act, related ISO standards, NIST AI RMF and other policy topics

Definitions and acronyms are critical. Many items do not break out acronyms or define terms in the stems or choices. If you cannot instantly recognize terms such as LLM, SLM, GAN, MLOps, ATLAS, or RMF, you will lose easy points.

Very important: the official materials and CompTIA outline do not cover all the needed knowledge. Many topics that are tested are not presented in CompTIA study guides nor the courseware slides. You must study beyond the official outline.

This quiz system here covers them.

 

Question Quality

The quality of the questions is generally good, but sometimes frustratingly vague. One may see misunderstanding of a concept in the question.

Exam Structure

You will receive up to 60 questions. Performance-based questions (PBQs) come first, followed by the multiple-choice section. You won’t be told how many points each question is worth, but it is generally agreed that one selection equals one point. When you get an exhibit or scenario, it may involve multiple selections.

The 2–4 Performance-based Questions/Simulations are challenging. They are often based upon matching topics and definitions, or putting steps in a correct sequence. You may also see short tasks such as matching an AI attack to a control, ordering a model-security process, or selecting the correct governance action.

Expect only 1–3 multiple-answer multiple-choice items. The majority of the remaining questions will be single-answer multiple choice.

Example: You could be asked to match prompt-injection types to defenses, place secure-model-deployment steps in order, or review a short scenario and choose the correct AI control. Each correct selection is typically worth a point.

Exam Time Crunch

Time is a key factor in this exam, but not as critical as Security+. You only have 60 minutes for up to 60 questions. 

Because the PBQs appear first, do not get stuck on them. Work through what you can, mark anything uncertain, and move on to the multiple-choice questions. You can return later.

Tip: Review the exam quickly, answering what you know, and marking questions for review. When you complete the first viewing of the questions, you will have time to go back and review the more difficult items.

Prep: Take the online quizzes. They are designed to march you through the questions in an aggressive fashion so that you will learn to read and answer the questions quickly and accurately. Drill definitions and acronyms first, then practice matching and sequencing items like the PBQs.