السؤال #1

An organization deploys an autonomous system that makes decisions affecting compliance with regulations.If those decisions could potentially produce regulatory breaches, which of the following BEST helps to manage associated liability exposures?

A. estricting AI deployment to use cases with lower impact and delaying broader operational integration

B. reating a separate compliance program for AI obligations and maintaining distinct reporting channels

C. etaining documentation that provides explainability for decisions and embedding controls in oversight processes

D. outing escalations through a single point of contact and prohibiting disclosure of proprietary information

عرض الإجابة

اجابة صحيحة: C

السؤال #2

Which of the following is a risk practitioner's BEST recommendation to establish accountability for AI system outputs and decisions?

A. entralized governance task force for model decision authority

B. ontinuous monitoring and key performance indicators (KPIs)

C. egular reviews of resource allocation for AI projects

D. ormal documented role assignments with named owners

عرض الإجابة

اجابة صحيحة: D

السؤال #3

Which of the following is the PRIMARY purpose of maintaining comprehensive model cards and documentation?

A. ustifying model use cases

B. reserving audit trails

C. isting technical specifications

D. roviding model transparency

عرض الإجابة

اجابة صحيحة: D

السؤال #4

A risk practitioner is developing risk scenarios related to successful data poisoning attacks on an AI model used across the organization. Which of the following is the BEST approach to help ensure the scenarios are relevant?

A. Perform adversarial testing in a sandbox environment

B. Gather information on similar attacks impacting industry peers

C. Create comprehensive data flow diagrams

D. Engage key stakeholders in risk scenario development

عرض الإجابة

اجابة صحيحة: D

السؤال #5

To reinforce organization-wide ethical norms and risk recognition, which of the following is MOST important to integrate into AI user training?

A. Acceptable use policy and acknowledgment

B. Ethical risk indicators and reporting

C. Cyber threat identification and AI incident handling

D. External regulations and compliance checklists

عرض الإجابة

اجابة صحيحة: B

السؤال #6

An organization depends on multiple external suppliers for AI models and training datasets. Which of the following is MOST important to have in place in order to reduce supply chain risk?

A. ppointment of a vendor risk manager with AI expertise to serve as a single point of contact

B. equirement for vendors to provide documentation of model training methods used

C. erifiable end-to-end provenance and audit trails for externally sourced artifacts

D. tandard indemnity clauses in vendor contracts to assign liability responsibilities

عرض الإجابة

اجابة صحيحة: C

السؤال #7

A risk practitioner is assessing risk in a newly implemented AI system integrated into an organization's business processes. Which of the following is the MOST important consideration for the risk practitioner?

A. Escalation and approval protocols for AI mitigation measures

B. Level of existing business process automation prior to AI adoption

C. AI expertise within the organization’s risk management function

D. Criticality and impact of decision-making driven by the AI system

عرض الإجابة

اجابة صحيحة: D

السؤال #8

Which of the following is the PRIMARY purpose of maintaining comprehensive model cards and documentation?

A. Justifying model use cases

B. Preserving audit trails

C. Listing technical specifications

D. Providing model transparency

عرض الإجابة

اجابة صحيحة: D

السؤال #9

Which of the following should be the MOST important area of focus during the development of data security risk scenarios specific to AI?

A. ttack vectors enabled by techniques for malicious alteration of AI system outputs

B. evelopment and communication of need-based access policies for the use of AI applications

C. ocumentation of business unit readiness for secure adoption of AI for general operations

D. uantum encryption methods for the protection of proprietary organizational data assets

عرض الإجابة

اجابة صحيحة: A

السؤال #10

An organization uses AI to generate procedure documents for operational processes. Which of the following would be of GREATEST concern to a risk practitioner?

A. I-generated procedure manuals include outdated procedures

B. he AI model is used to generate procedures for high-risk activities

C. he procedures are not aligned to organizational policy

D. I-generated procedure documents do not undergo human review

عرض الإجابة

اجابة صحيحة: D

السؤال #11

An organization is integrating AI systems into core business operations and has decided to establish a formal process to align AI initiatives with corporate values. Which of the following is the GREATEST benefit of this decision?

A. Ethical principles can be added to AI development and usage after deployment

B. Return on investment (ROI) for new AI services can be evaluated more accurately

C. Executive support for technical training and upskilling related to AI can be more effectively obtained

D. The transparency and explainability of AI model decisions is enhanced for all stakeholder groups

عرض الإجابة

اجابة صحيحة: D

السؤال #12

A financial organization is developing an AI model for credit risk assessment. Which of the following is MOST important to ensure the training data supports accurate and unbiased outcomes?

A. ata normalization

B. ynthetic data augmentation

C. upervised learning

D. ataset diversity

عرض الإجابة

اجابة صحيحة: D

السؤال #13

Which of the following is the GREATEST concern when AI risk management operates separately from enterprise risk management (ERM)?

A. Lack of strategic control alignment

B. Inconsistent regulatory reporting

C. Reduced return on investment (ROI) due to increased model training costs

D. Redundant risk documentation and scoring

عرض الإجابة

اجابة صحيحة: A

السؤال #14

An organization seeks to implement a new AI system that uses customer information to create targeted product recommendations. Which of the following is the MOST important consideration to ensure the system complies with regulatory requirements?

A. Legally sourced data with appropriate consent

B. Backup and storage protocols for sensitive data

C. Human review of system recommendations

D. Use of supervised learning during model training

عرض الإجابة

اجابة صحيحة: A

السؤال #15

A risk practitioner is reviewing an organization's implementation of a business-critical AI decision system.Which of the following would be of GREATEST concern?

A. nsufficient scenario-based testing of system failure modes and recovery procedures

B. isk threshold acceptance criteria that do not require 100% decision accuracy

C. ack of cross-functional AI incident identification and escalation training

D. eliance on conventional third-party security providers for system monitoring

عرض الإجابة

اجابة صحيحة: A

السؤال #16

Which of the following BEST helps to ensure AI model outputs can be reproduced in other environments?

A. equiring manual review of outputs for stability and accuracy

B. aintaining continuous post-deployment performance monitoring

C. apturing and archiving complete snapshots of training datasets

D. mplementing AI-specific change management processes

عرض الإجابة

اجابة صحيحة: C

السؤال #17

Which of the following BEST enables an organization adopting AI solutions to foster an ethical and risk-aware culture?

A. All business units use checklists to ensure AI risk and ethical concerns are addressed

B. Senior management representatives actively participate in industry conferences related to AI ethics

C. AI policies include clear disciplinary actions for violations of risk and ethical standards

D. Leadership consistently models ethical behavior and values for AI development and use

عرض الإجابة

اجابة صحيحة: D

السؤال #18

Which of the following BEST enables an organization adopting AI solutions to foster an ethical and risk-aware culture?

A. ll business units use checklists to ensure AI risk and ethical concerns are addressed

B. enior management representatives actively participate in industry conferences related to AI ethics

C. I policies include clear disciplinary actions for violations of risk and ethical standards

D. eadership consistently models ethical behavior and values for AI development and use

عرض الإجابة

اجابة صحيحة: D

السؤال #19

A risk practitioner is developing risk scenarios related to successful data poisoning attacks on an AI model used across the organization. Which of the following is the BEST approach to help ensure the scenarios are relevant?

A. erform adversarial testing in a sandbox environment

B. ather information on similar attacks impacting industry peers

C. reate comprehensive data flow diagrams

D. ngage key stakeholders in risk scenario development

عرض الإجابة

اجابة صحيحة: D

السؤال #20

A risk practitioner is concerned that an AI model's responses have become more inaccurate over time, leading to diminished customer trust. Which of the following should the risk practitioner recommend be done FIRST?

A. etermine the impact on critical features and model outputs

B. ully retrain the model with a more recent dataset

C. evise validation processes to add more review cycles

D. ake the model offline and perform a full backup

عرض الإجابة

اجابة صحيحة: A

السؤال #21

An organization has deployed generative AI tools broadly but lacks a consistent method to refresh governance policies and controls. Which of the following is the risk practitioner's BEST recommendation?

A. entralize decision making and concentrate authority within executive leadership and technical owners

B. mplement systematic updates and emphasize alignment with emerging regulatory expectations

C. chedule annual compliance reviews and integrate audit findings into revision planning

D. stablish an ongoing review cadence and codify procedures for reassessment

عرض الإجابة

اجابة صحيحة: D

السؤال #22

Which of the following is the PRIMARY reason to include contractual requirements for model updates and disclosures from third-party AI suppliers?

A. To guarantee that existing availability targets will be achieved following each update

B. To ensure timely detection and mitigation of new system risks that could harm individuals

C. To ensure internal trust in the model's reliability before launching AI-driven innovation efforts

D. To determine appropriate access to vendor staff for datasets containing sensitive information

عرض الإجابة

اجابة صحيحة: B

السؤال #23

A risk practitioner is evaluating AI model cards and documentation prior to deployment. Which of the following represents the GREATEST risk to enterprise AI governance?

A. nadequate explainability

B. ecentralized version control

C. verly detailed technical specifications

D. elays in regulatory filings

عرض الإجابة

اجابة صحيحة: A

السؤال #24

Which of the following is a risk practitioner's BEST recommendation to establish accountability for AI system outputs and decisions?

A. Centralized governance task force for model decision authority

B. Continuous monitoring and key performance indicators (KPIs)

C. Regular reviews of resource allocation for AI projects

D. Formal documented role assignments with named owners

عرض الإجابة

اجابة صحيحة: D

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated ISACA Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated ISACA Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان