AI Security Engineering Practice Exam

A practice version of the readiness assessment intended for repeat attempts, self-study, and training cohorts. The practice exam emphasizes explanations and remediation rather than pass/fail outcomes.

100 q · 90m

Question 1 of 1001%

agent security

Select the four questions that best assess whether an agent's tool permissions are safe.

A product team proposes an AI agent that can search internal docs, create tickets, send Slack messages, and call a generic HTTP tool. The team says all tools are needed for productivity.

A. What identity or token does each tool call use, and is it scoped to the required controls.B. Are tool arguments validated and restricted by allowlists, schemas, and policy checks?C. Are tool calls, arguments, approvals, results, and requester identity logged for investigation?.D. Which tool calls can create external side effects, and which require human approval?E. Does the agent have a friendly personality that users like.F. Does the model have high benchmark scores.