ISACA Advanced in AI Risk - AAIR Free Exam Questions

A. Engage key stakeholders in risk scenario development.

B. Perform adversarial testing in a sandbox environment.

C. Create comprehensive data flow diagrams.

D. Gather information on similar attacks impacting industry peers

A. AI solution adoption rates among business units whose employees have taken training

B. Number of AI irregularities or potential tampering incidents reported by users

C. Changes in risk ratings for risk scenarios involving awareness of insider threats

D. Percentage of users who can identify the financial impact of AI outcomes

A. Conduct parallel model evaluation to quantify the impact of system operations.

B. Restrict disclosure of model internal operations to safeguard proprietary algorithms and protect trade secrets.

C. Conduct a comprehensive pre-launch evaluation of potential adverse impacts and compliance obligations.

D. Engage external consultants with expertise on measuring broad societal impacts.

A. Feature importance weighting

B. API rate limiting

C. Predictive analytics

D. Anomaly detection

A. To develop response metrics for AI cybersecurity incidents

B. To ensure external threats to corporate assets are given highest priority

C. To tailor controls to adversary motivations and capabilities

D. To align AI threat and vulnerability risk with the overall IT control taxonomy

A. an unsupervised clustering model that groups observations by similarity metrics.

B. a generative model capable of synthesizing samples from an underlying distribution.

C. a rule-based expert system driven by explicit decision rules and domain knowledge.

D. a reinforcement learning model that optimizes sequential actions through reward signals.

A. Automated production of technical performance reports for AI business tools

B. Reduced costs through elimination of redundant business risk oversight mechanisms

C. Centralized governance of AI inventory and classification activities

D. Enhanced alignment of analysis outputs with organizational risk thresholds

A. Ineffective credential management

B. Delays in breach identification and response

C. Increased staffing needs for human validation

D. Identities are not incorporated into the federated system

A. Provide role-tailored education supplemented by scheduled refreshers.

B. Engage external providers to deliver learning content with periodic updates.

C. Focus the training curriculum on compliance with AI-specific laws and regulations.

D. Incorporate the code of conduct into onboarding modules for new personnel.

A. Documentation of business unit readiness for secure adoption of AI for general operations

B. Attack vectors enabled by techniques for malicious alteration of AI system outputs

C. Development and communication of need-based access policies for the use of AI applications

D. Quantum encryption methods for the protection of proprietary organizational data assets