AAISM Exam Dumps (V8.02) with Practice Questions and Answers: Prepare for Your ISACA Advanced in AI Security Management (AAISM) Exam

1. Embedding unique identifiers into AI models would BEST help with:

2. A financial institution plans to deploy an AI system to provide credit risk assessments for loan applications.

Which of the following should be given the HIGHEST priority in the system’s design to ensure ethical decision-making and prevent bias?

3. An organization using an AI model for financial forecasting identifies inaccuracies caused by missing data.

Which of the following is the MOST effective data cleaning technique to improve model performance?

4. A model producing contradictory outputs based on highly similar inputs MOST likely indicates the presence of:

5. Personal data used to train AI systems can BEST be protected by:

6. Which of the following controls BEST mitigates the risk of bias in AI models?

7. Which of the following would BEST help mitigate vulnerabilities associated with hidden triggers in generative AI models?

8. In a new supply chain management system, AI models used by participating parties are interactively connected to generate advice in support of management decision making.

Which of the following is the GREATEST challenge related to this architecture?

9. Which of the following is the MOST critical key risk indicator (KRI) for an AI system?

10. An organization is updating its vendor arrangements to facilitate the safe adoption of AI technologies.

Which of the following would be the PRIMARY challenge in delivering this initiative?

11. After implementing a third-party generative AI tool, an organization learns about new regulations related to how organizations use AI.

Which of the following would be the BEST justification for the organization to decide not to comply?

12. Which of the following recommendations would BEST help a service provider mitigate the risk of lawsuits arising from generative AI’s access to and use of internet data?

13. Which of the following is the BEST approach for minimizing risk when integrating acceptable use policies for AI foundation models into business operations?

14. Which of the following is the MOST serious consequence of an AI system correctly guessing the personal information of individuals and drawing conclusions based on that information?

15. How can an organization BEST protect itself from payment diversions caused by deepfake attacks impersonating management?

16. A retail organization implements an AI-driven recommendation system that utilizes customer purchase history.

Which of the following is the BEST way for the organization to ensure privacy and comply with regulatory standards?

17. Which of the following would BEST help to prevent the compromise of a facial recognition AI system through the use of alterations in facial appearance?

18. An organization needs large data sets to perform application testing.

Which of the following would BEST fulfill this need?

19. Which of the following is the MOST important course of action when implementing continuous monitoring and reporting for AI-based systems?

20. Which of the following is the MOST important consideration when deciding how to compose an AI red team?

21. Which of the following should be done FIRST when developing an acceptable use policy for generative AI?

22. Which of the following is the BEST mitigation control for membership inference attacks on AI systems?

23. Which of the following is MOST important to consider when validating a third-party AI tool?

24. Which of the following technologies can be used to manage deepfake risk?

25. An organization uses an AI tool to scan social media for product reviews. Fraudulent social media accounts begin posting negative reviews attacking the organization's product.

Which type of AI attack is MOST likely to have occurred?

26. An organization is facing a deepfake attack intended to manipulate stock prices. The organization’s crisis communication plan has been activated.

Which of the following is MOST important to include in the initial response?

27. Which of the following metrics BEST evaluates the ability of a model to correctly identify all true positive instances?

28. Which of the following is the MOST important consideration for an organization that has decided to adopt AI to leverage its competitive advantage?

29. Which of the following types of testing can MOST effectively mitigate prompt hacking?

30. Which of the following information is MOST important to include in a centralized AI inventory?

31. In the context of generative AI, which of the following would be the MOST likely goal of penetration testing during a red-teaming exercise?

32. An organization plans to apply an AI system to its business, but developers find it difficult to predict system results due to lack of visibility to the inner workings of the AI model.

Which of the following is the GREATEST challenge associated with this situation?

33. An attacker crafts inputs to a large language model (LLM) to exploit output integrity controls.

Which of the following types of attacks is this an example of?

34. Which of the following BEST describes the role of risk documentation in an AI governance program?

35. When integrating AI for innovation, which of the following can BEST help an organization manage security risk?