CyberCertPrepAI Security FundamentalsAdversarial ML & Model AttacksEASYFree question
Scenario
A red team has been contracted to test a bank's ML fraud detection system. They are given a test account with API access to the fraud scoring endpoint. They can submit transaction records and receive a fraud probability score (0.0 to 1.0). They have no access to the model code, architecture documentation, or training data. The vendor has not disclosed which ML framework was used.
A red team is testing a financial fraud detection model by querying its API with varied transaction features and observing the probability scores. They have no access to model weights or training data. What type of adversarial ML attack setting is this?
- A.White-box attack - full model knowledge
- B.Gray-box attack - partial knowledge of architecture
- C.White-hat attack - authorized testing with source code access
- D.Black-box attack - only input/output access
Why D is correct