The syllabus describes that data pre-processing includes cleaning (e.g., fixing or removing invalid data) and transforming data (e.g., changing data types such as numbers stored as strings).
"Transformation: The format of the given data is changed... converting categorical data into numerical data, changing image formats..." (Reference: ISTQB CT-AI Syllabus v1.0, Section 4.1.1, Page 34 of 99)

The syllabus explicitly mentions challenges of handling personal data and ensuring privacy when testing AI- based systems:
"The management of personal data and sensitive data is often a concern during testing, as testing typically requires realistic data and it is difficult to fully anonymize data." (Reference: ISTQB CT-AI Syllabus v1.0, Section 7.3, page 52 of 99)

The syllabus mentions that AI can help optimize regression test suites:
"An AI-based tool can perform optimization of the regression test suite by analyzing... the information from previous test results, associated defects, and the latest changes that have been made, such as features which are broken more frequently and which tests exercise code impacted by recent changes." (Reference: ISTQB CT-AI Syllabus v1.0, Section 11.4, page 79 of 99)

To calculate the accuracy, recall, and specificity from the confusion matrix provided, we use the following formulas:
* Confusion Matrix:
* Actually Rotten: 45 (True Positive), 8 (False Positive)
* Actually Fresh: 5 (False Negative), 42 (True Negative)
* Accuracy:
* Accuracy is the proportion of true results (both true positives and true negatives) in the total population.
* Formula: Accuracy=TP+TNTP+TN+FP+FN\text{Accuracy} = \frac{TP + TN}{TP + TN + FP + FN}Accuracy=TP+TN+FP+FNTP+TN
* Calculation: Accuracy=45+4245+42+8+5=87100=0.87\text{Accuracy} = \frac{45 + 42}{45 + 42
+ 8 + 5} = \frac{87}{100} = 0.87Accuracy=45+42+8+545+42=10087=0.87
* Recall (Sensitivity):
* Recall is the proportion of true positive results in the total actual positives.
* Formula: Recall=TPTP+FN\text{Recall} = \frac{TP}{TP + FN}Recall=TP+FNTP
* Calculation: Recall=4545+5=4550=0.9\text{Recall} = \frac{45}{45 + 5} = \frac{45}{50} = 0.9 Recall=45+545=5045=0.9
* Specificity:
* Specificity is the proportion of true negative results in the total actual negatives.
* Formula: Specificity=TNTN+FP\text{Specificity} = \frac{TN}{TN + FP}Specificity=TN+FPTN
* Calculation: Specificity=4242+8=4250=0.84\text{Specificity} = \frac{42}{42 + 8} = \frac{42}
{50} = 0.84Specificity=42+842=5042=0.84
Therefore, the correct combinations of accuracy, recall, and specificity are 0.87, 0.9, and 0.84 respectively.
References:
ISTQB CT-AI Syllabus, Section 5.1, Confusion Matrix, provides detailed formulas and explanations for calculating various metrics including accuracy, recall, and specificity.
"ML Functional Performance Metrics" (ISTQB CT-AI Syllabus, Section 5).

A . Black box attacks based on adversarial examples create an exact duplicate model of the original.
Black box attacks do not create an exact duplicate model. Instead, they exploit the model by querying it and using the outputs to craft adversarial examples without knowledge of the internal workings.
B . These attack examples cause a model to predict the correct class with slightly less accuracy even though they look like the original image.
Adversarial examples typically cause the model to predict the incorrect class rather than just reducing accuracy. These examples are designed to be visually indistinguishable from the original image but lead to incorrect classifications.
C . These attacks can't be prevented by retraining the model with these examples augmented to the training data.
This statement is incorrect because retraining the model with adversarial examples included in the training data can help the model learn to resist such attacks, a technique known as adversarial training.
D . These examples are model specific and are not likely to cause another model trained on the same task to fail.
Adversarial examples are often model-specific, meaning that they exploit the specific weaknesses of a particular model. While some adversarial examples might transfer between models, many are tailored to the specific model they were generated for and may not affect other models trained on the same task.
Therefore, the correct answer is D because adversarial examples are typically model-specific and may not cause another model trained on the same task to fail.