A security analyst is performing threat modeling for a new AI chatbot.

Vendor: CompTIA
Product: CAS-005
Update on: Dec 8, 2025
Questions: 326

CompTIA CAS-005 Question Answer

A security analyst is performing threat modeling for a new AI chatbot. The AI chatbot will be rolled out to help customers develop configuration information within the company's SaaS offering. Which of the following issues would require involvement from the company's internal legal team?

An internal user finds a way to use prompt injection to disregard guardrails.

A DoS vulnerability exists that could impact all customers who use the chatbot.

A bug bounty of an exploitable model inversion vulnerability is submitted.

User consent is not being collected before training models on customer data.

An access control issue is allowing the model to be poisoned with incorrect information.