During an audit of an organization that has adopted AI, it was discovered that data ownership responsibilities were not clearly defined. Which of the following is the MOST likely consequence of this gap?
Answer(s): D
The most likely consequence of unclear data ownership is an increased risk of data breaches due to lack of accountability. Without defined ownership, responsibilities for protecting, monitoring, and governing data are unclear, weakening security and compliance.
Which of the following should be the PRIMARY consideration when establishing an accountability structure for AI governance?
Answer(s): A
The primary consideration in establishing an accountability structure for AI governance is ensuring AI systems are used ethically and responsibly. This underpins trust, compliance, and risk management while aligning AI use with organizational and societal values.
Which of the following is the GREATEST risk associated with using facial recognition authentication for opening bank accounts?
Answer(s): B
The greatest risk is that AI-generated deepfake or synthetic images can fool the authentication system. This represents a serious security and fraud risk, as attackers could bypass identity verification entirely using artificially created facial images.
Which of the following is MOST important for an IS auditor to assess when reviewing logs of prompts and corresponding AI responses?
The most important factor to assess is the disclosure of confidential information in AI responses. Reviewing logs ensures sensitive data is not exposed or mishandled, which is critical for maintaining privacy, security, and regulatory compliance.
Which of the following is the MOST important to ensure an organization's management is fulfilling ethical responsibilities related to AI?
Ensuring that human rights are protected from the potential negative impacts of AI is the most important ethical responsibility. It establishes a foundation of fairness, accountability, and respect for individuals, which underpins all other governance and compliance measures.
A company is developing an AI system to generate videos and images. Which of the following would BEST enable the company to mitigate harm caused by deepfakes?
Watermarking best enables the company to mitigate harm caused by deepfakes. It provides a reliable way to indicate content authenticity and helps distinguish genuine media from AI-generated manipulations.
An audit reveals inconsistencies in the retention period of data used for AI training. What is the BEST recommendation to mitigate this risk?
Answer(s): C
Implementing automated data cleansing tools to enforce retention policies is the best recommendation. This ensures consistent application of data retention requirements, reduces compliance risks, and minimizes the chance of outdated or noncompliant data being used for AI training.
An IS auditor reviewing an AI-based data governance program discovers that there is no formal data classification policy in place. Which of the following is the MOST likely consequence of this gap?
The most likely consequence of not having a formal data classification policy is inappropriate handling of sensitive data during AI model training. Without classification, sensitive information may be exposed, mishandled, or used in violation of compliance requirements.
Share your comments for ISACA AAIA exam with other users:
great content and wonderful to have the answers with explanation
for question #118, the answer is option c. the screen shot is showing the drop down, but the answer is marked incorrectly please update . thanks for sharing such nice questions.
the correct answer for the question 29 is d.
question no 22: correct answers: bc, 1 per session 1 per page 1 per component always
these are pretty useful
awesome
yes please upload
great job whoever put this together, for the greater good! thanks!
just started to view all questions for the exam
helpful material
hope for the best
will post exam has finished
really correct and good analyze!
excellent thanks a lot
will post once pass the cka exam
good content
q:32 answer has to be option c
nice questions
i really like the support team in this website. they are fast in communication and very helpful.
a good contemporary exam review
q23, its an array, isnt it? starts with [ and end with ]. its an array of objects, not object.
cool very helpfull
i just passed. this exam dumps is the same one from prepaway and examcollection. it has all the real test questions.
is this a valid prince2 practitioner dumps?
all are relatable questions
might help me to prepare for the exam
just paid and downlaod the 2 exams using the 50% sale discount. so far i was able to download the pdf and the test engine. all looks good.
i think it should be a,c. option d goes against the principle of building anything custom unless there are no work arounds available
very legible
is this exam accurate or helpful?
please upload dump, i have exam in 2 days
this is useful
question 232 answer should be perimeter not netowrk layer. wrong answer selected