السؤال #1

What is the role of an AI governance committee within an organization?

A. To prioritize AI vendors over other business operations

B. To oversee AI implementation and ensure alignment with ethical guidelines

C. To solely focus on marketing AI products

D. To ensure AI models are proprietary and not shared with stakeholders

عرض الإجابة

اجابة صحيحة: B

السؤال #2

Which activity BEST supports ongoing assurance for AI systems operating in regulated industries?

A. Security team certification renewal

B. Continuous monitoring with compliance-aligned KPIs

C. Annual re-documentation of the data pipeline

D. Reducing manual sign-off requirements

عرض الإجابة

اجابة صحيحة: B

السؤال #3

Which of the following is MOST important to consider when validating a third-party AI tool?

A. erms and conditions

B. oundtable testing

C. ight to audit

D. ndustry analysis and certifications

عرض الإجابة

اجابة صحيحة: C

السؤال #4

A hospital adopts an AI solution from an external vendor to help diagnose rare diseases. Which of the following BEST demonstrates the verification of security requirements for this technology?

A. Require contractual clauses stipulating periodic information security reviews

B. Preview contractual clauses of mandatory security AI software update

C. Perform regular in-depth vulnerability scans on the AI system

D. Integrate requirements for sensitive data aligned with healthcare regulations

عرض الإجابة

اجابة صحيحة: D

السؤال #5

Which of the following is the MOST significant risk associated with the use of AI for autonomous vehicle navigation?

A. alse object detection

B. isclosure of proprietary data

C. nefficient vehicle routing

D. enial of service (DoS) attacks

عرض الإجابة

اجابة صحيحة: A

السؤال #6

Within an incident handling process, which of the following would BEST help restore end-user trust in an AI system?

A. Remediation of the AI system based on lessons learned

B. The AI model's outputs are validated by team members

C. AI is used to monitor incident detection and alerts

D. The AI model prioritizes incidents based on business impact

عرض الإجابة

اجابة صحيحة: A

السؤال #7

Which of the following should be the PRIMARY consideration for an organization concerned about liabilities associated with unforeseen behavior from agentic AI systems?

A. Model dependencies

B. Approved base models

C. Acceptable risk level

D. Accountability model

عرض الإجابة

اجابة صحيحة: D

السؤال #8

When documenting information about machine learning (ML) models, which of the following artifacts BEST helps enhance stakeholder trust?

A. yperparameters

B. ata quality controls

C. odel prototyping

D. odel card

عرض الإجابة

اجابة صحيحة: D

السؤال #9

Which of the following is MOST important to consider when validating a third-party AI tool?

A. Terms and conditions

B. Roundtable testing

C. Right to audit

D. Industry analysis and certifications

عرض الإجابة

اجابة صحيحة: C

السؤال #10

An organization using an AI model for financial forecasting identifies inaccuracies caused by missingdata. Which of the following is the MOST effective data cleaning technique to improve modelperformance?

A. ncreasing the frequency of model retraining with the existing data set

B. pplying statistical methods to address missing data and reduce bias

C. eleting outlier data points to prevent unusual values impacting the model

D. uning model hyperparameters to increase performance and accuracy

عرض الإجابة

اجابة صحيحة: B

السؤال #11

A model producing contradictory outputs based on highly similar inputs MOST likely indicates the presence of:

A. Poisoning attacks

B. Evasion attacks

C. Membership inference

D. Model exfiltration

عرض الإجابة

اجابة صحيحة: B

السؤال #12

Which of the following is the GREATEST threat to an organization where shadow generative AI is prevalent?

A. mployee misuse of the AI system

B. oftware licensing violations

C. ccidental leakage of proprietary data

D. imited technical knowledge of AI operations

عرض الإجابة

اجابة صحيحة: C

السؤال #13

An organization's CIO provided the AI steering committee with a list of AI technologies in use and tasked them with categorizing the technologies by risk. Which of the following should the committee do FIRST?

A. Begin grouping similar AI products and solutions together

B. Ensure the AI technologies are included in the asset inventory

C. Assess risk levels based on risk appetite and regulatory requirements

D. Identify vulnerabilities related to the technologies in use

عرض الإجابة

اجابة صحيحة: B

السؤال #14

A security assessment revealed that attackers could access sensitive company data through chat interface injection. What is the BEST mitigation?

A. Conducting regular security audits

B. Manually reviewing AI model outputs

C. Implementing input validation and templates

D. Ensuring continuous monitoring and tagging

عرض الإجابة

اجابة صحيحة: C

السؤال #15

An organization uses an AI tool to scan social media for product reviews. Fraudulent social media accounts begin posting negative reviews attacking the organization's product. Which type of AI attack is MOST likely to have occurred?

A. eepfake

B. ata poisoning

C. odel inversion

D. vailability attack

عرض الإجابة

اجابة صحيحة: D

السؤال #16

How can an organization best remain compliant when decommissioning an AI system that recorded patient data?

A. Perform a post-destruction risk assessment

B. Ensure backups are tested and access controls are audited

C. Update governance policies based on lessons learned

D. Ensure a certificate of destruction is received and archived

عرض الإجابة

اجابة صحيحة: D

السؤال #17

A PRIMARY objective of responsibly providing AI services is to:

A. Enable AI models to operate autonomously

B. Ensure the confidentiality and integrity of data processed by AI models

C. Build trust for decisions and predictions made by AI models

D. Improve the ability of AI models to learn from new data

عرض الإجابة

اجابة صحيحة: C

السؤال #18

After implementing a third-party generative AI tool, an organization learns about new regulations related to how organizations use AI. Which of the following would be the BEST justification for the organization to decide not to comply?

A. he AI tool is widely used within the industry

B. he AI tool is regularly audited

C. he risk is within the organization's risk appetite

D. he cost of noncompliance was not determined

عرض الإجابة

اجابة صحيحة: C

السؤال #19

Which of the following BEST reduces the risk of exposing sensitive data through the output of large language models (LLMs) in applications?

A. Encrypting data in transit and at rest

B. Conducting adversarial testing

C. Implementing data sanitization techniques

D. Enforcing least privilege access

عرض الإجابة

اجابة صحيحة: C

السؤال #20

An organization uses an AI tool to scan social media for product reviews. Fraudulent social mediaaccounts begin posting negative reviews attacking the organization's product. Which type of AI attackis MOST likely to have occurred?

A. odel inversion

B. eepfake

C. vailability attack

D. ata poisoning

عرض الإجابة

اجابة صحيحة: C

السؤال #21

An organization plans to apply an AI system to its business, but developers find it difficult to predictsystem results due to lack of visibility to the inner workings of the AI model. Which of the following isthe GREATEST challenge associated with this situation?

A. aining the trust of end users through explainability and transparency

B. ssigning a risk owner who is responsible for system uptime and performance

C. etermining average turnaround time for AI transaction completion

D. ontinuing operations to meet expected AI security requirements

عرض الإجابة

اجابة صحيحة: A

السؤال #22

An AI fraud detection system in a bank uses transaction data that includes customer names and account numbers. Which of the following BEST helps the bank comply with privacy regulations and data classification policies?

A. asking or tokenizing customer-related data in use

B. onducting awareness training for AI developers

C. ecurity training to avoid leakage of personal data

D. erforming periodic audits of the AI model for compliance

عرض الإجابة

اجابة صحيحة: A

السؤال #23

Within which stage of the AI development life cycle should effective feature engineering be conducted?

A. Development

B. Testing

C. Design

D. Define

عرض الإجابة

اجابة صحيحة: A

السؤال #24

An organization plans to apply an AI system to its business, but developers find it difficult to predict system results due to lack of visibility to the inner workings of the AI model. Which of the following is the GREATEST challenge associated with this situation?

A. ssigning a risk owner who is responsible for system uptime and performance

B. ontinuing operations to meet expected AI security requirements

C. etermining average turnaround time for AI transaction completion

D. aining the trust of end users through explainability and transparency

عرض الإجابة

اجابة صحيحة: D

السؤال #25

Which of the following would BEST protect an AI system against prompt injection attacks?

A. ngoing validation of training datasets

B. ccess controls to the AI model

C. tress testing of the AI system

D. ontext awareness mechanisms

عرض الإجابة

اجابة صحيحة: D

السؤال #26

Which of the following is MOST important to consider when obtaining senior management and stakeholder support for a new AI governance program?

A. istorical data related to security breaches and remediation efforts

B. mpact on diverse enterprise objectives and processes

C. isk visualizations that incorporate AI-specific threats and vulnerabilities

D. lignment with existing security and privacy policies

عرض الإجابة

اجابة صحيحة: B

السؤال #27

Which of the following is the MOST effective way to identify and address security risk in an AI model?

A. onduct threat modeling to identify vulnerabilities and possible attack methods

B. ssign staff to review AI model outputs for accuracy

C. dd more data to the model to increase its accuracy and reduce errors

D. ncrypt the training data and model parameters to prevent unauthorized access

عرض الإجابة

اجابة صحيحة: A

السؤال #28

Embedding unique identifiers into AI models would BEST help with:

A. reventing unauthorized access

B. racking ownership

C. liminating AI system biases

D. etecting adversarial attacks

عرض الإجابة

اجابة صحيحة: B

السؤال #29

After implementing a third-party generative AI tool, an organization learns about new regulations related to how organizations use AI. Which of the following would be the BEST justification for the organization to decide not to comply?

A. The AI tool is widely used within the industry

B. The AI tool is regularly audited

C. The risk is within the organization's risk appetite

D. The cost of noncompliance was not determined

عرض الإجابة

اجابة صحيحة: C

السؤال #30

Which of the following is the MOST effective approach to mitigate privacy concerns when an organization collects personal data through a third-party AI application?

A. Have the vendor sign a nondisclosure agreement

B. Obtain data subject consent on the end user interface

C. Apply encryption to safeguard personnel data

D. Conduct a review of applicable data protection regulations

عرض الإجابة

اجابة صحيحة: B

السؤال #31

An organization is reviewing an AI application to determine whether it is still needed. Engineers have been asked to analyze the number of incorrect predictions against the total number of predictions made. Which of the following is this an example of?

A. odel validation

B. ontrol self-assessment (CSA)

C. xplainable decision-making

D. ey performance indicator (KPI)

عرض الإجابة

اجابة صحيحة: D

السؤال #32

From a risk perspective, which of the following is the MOST important step when implementing an adoption strategy for AI systems?

A. Benchmarking against peer organizations' AI risk strategies

B. Implementing a robust risk analysis methodology tailored to AI-specific tasks

C. Conducting an AI risk assessment and updating the enterprise risk register

D. Establishing a comprehensive AI risk assessment framework

عرض الإجابة

اجابة صحيحة: C

السؤال #33

A company suspects its AI threat-detection model is degrading due to changes in cyber-attack behavior. Which activity would MOST effectively identify the cause?

A. Reviewing system prompts

B. Conducting model drift analysis

C. Increasing the training data size

D. Performing access-control audits

عرض الإجابة

اجابة صحيحة: B

السؤال #34

Which safeguard BEST limits the operational risk of hallucinations in LLM-driven customer-service tools?

A. Parameter-efficient fine-tuning

B. Human approval workflow for high-impact responses

C. Model sharding

D. Expanded context length

عرض الإجابة

اجابة صحيحة: B

السؤال #35

When designing an AI security architecture, what is the PRIMARY purpose of using adversarial training?

A. To make AI models more resilient to potential attacks

B. To improve the fairness of AI model decisions

C. To reduce the computational cost of resisting attacks

D. To enhance AI model performance on standard datasets

عرض الإجابة

اجابة صحيحة: A

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated ISACA Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated ISACA Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان