ISACA Advanced in AI Security Management (AAISM) - AAISM Exam Practice Test
An organization is deploying AI agents with tools and data access. Which of the following is MOST important to include in end-user acceptable use policies to reduce misuse?
Correct Answer: D
Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).
Which risk is BEST mitigated by automatically clearing in-memory state at the end of each agent application session?
Correct Answer: D
Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).
Which of the following MOST effectively secures ongoing stakeholder support for AI initiatives?
Correct Answer: A
Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).
A vendor switched its chatbot's AI model without due diligence, causing unethical investment advice. What control BEST prevents this scenario?
Correct Answer: A
Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).
Which of the following BEST enables an organization to strengthen information security controls around the use of generative AI applications?
Correct Answer: D
Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).
Which of the following would BEST protect an AI system against an evasion attack?
Correct Answer: B
Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).
An aerospace manufacturing company that prioritizes accuracy and security has decided to use generative AI to enhance operations. Which of the following large language model (LLM) adoption plans BEST aligns with the company's risk appetite?
Correct Answer: B
Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).
AI developers often find it difficult to explain the processes inside deep learning systems PRIMARILY because:
Correct Answer: C
Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).
A bank's fraud detection AI model is trained on customer transaction data. A customer submits a data erasure request under privacy law, but the data also exists in training sets. Which of the following is the BEST approach if there is concern that complete data removal may reduce accuracy?
Correct Answer: C
Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).
An attacker is able to exploit the intended behavior of an AI system using a specific input or classes of inputs. Which type of attack is this an example of?
Correct Answer: B
Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).
What BEST ensures a proper business continuity plan (BCP) for an AI solution?
Correct Answer: C
Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).
An organization engages its end users to be involved in the AI life cycle to validate security controls. Which of the following MOST effectively supports decision-making regarding ethical and safety controls?
Correct Answer: B
Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).
Which of the following is the MOST important course of action prior to placing an in-house developed AI solution into production?
Correct Answer: B
Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).