GIAC GAIPS: GIAC AI Platform Security

Last checked October 22, 2026 against the official GIAC exam page.

1. Question 1Securing the AI platform

   A team downloads a pretrained model from a public hub and loads it into production. Which control reduces the risk of a tampered model?

   1. ALoad it directly into the production inference service because the hub is a trusted source
   2. BVerify the model's source, checksum or signature, and scan the artifact before use
   3. CRename the file to a trusted name such as model.safetensors and then copy it to the server
   4. DRun it with administrator rights inside the production cluster so that it can reach the network
   Show answer and explanationHide answer

   Correct answer: B

   Verifying provenance, checksums or signatures, and scanning artifacts detects tampering before deployment. Trusting the hub, renaming, and admin rights do not reduce the risk.

2. Question 2LLM application threats

   An attacker embeds hidden instructions in a web page that a retrieval-augmented assistant reads, instructing the model to send user data to an external address. Which vulnerability class does this describe?

   1. ACross-site request forgery on a login form
   2. BBuffer overflow in the GPU driver
   3. CIndirect prompt injection
   4. DSQL injection in the warehouse
   Show answer and explanationHide answer

   Correct answer: C

   Indirect prompt injection places instructions in content the model later ingests, such as a retrieved web page. SQL injection, CSRF, and buffer overflows target different layers and are not the mechanism described.

3. Question 3Governance and assurance

   An organization must demonstrate that its AI system follows a documented security standard. Which artifact best supports this?

   1. AA marketing brochure describing the platform's security features for buyers this year
   2. BA verbal assurance from a developer who states the control was reviewed in a team meeting
   3. CA control mapping showing how each requirement is implemented and evidenced
   4. DA screenshot of a dashboard chart exported from the monitoring tool showing alert counts
   Show answer and explanationHide answer

   Correct answer: C

   A control mapping links each requirement to implementation and evidence, which supports assurance. Brochures, verbal assurances, and screenshots lack that traceability.

4. Question 4Detection and monitoring

   A monitoring system must spot a sudden rise in requests from one client that tries many similar prompts. Which signal is most useful?

   1. AThe office air temperature in the main building lobby
   2. BRequest volume and similarity patterns per client over time
   3. CThe model's published release notes and changelog
   4. DThe number of registered users in the directory
   Show answer and explanationHide answer

   Correct answer: B

   Volume and similarity per client reveal scraping or extraction attempts. Release notes, directory counts, and office temperature do not indicate abuse.

5. Question 5Adversarial testing and red teaming

   A red team wants to find out whether a chatbot can be tricked into revealing its system prompt. Which test approach is most appropriate?

   1. ALimit testing to the chatbot's greeting and onboarding text shown at start of a session
   2. BReview the source code and configuration files alone, and skip live interaction testing
   3. CAsk the chatbot once, politely and in a single message, to reveal its system prompt
   4. DCraft prompts that attempt to override instructions and check whether protected content is returned
   Show answer and explanationHide answer

   Correct answer: D

   Adversarial prompts that attempt to override instructions test the actual weakness. A single polite request, greeting tests, and code review alone do not exercise the behaviour under attack.