During an audit of an organization that has adopted AI, it was discovered that data ownership responsibilities were not clearly defined. Which of the following is the MOST likely consequence of this gap?
Answer(s): D
The most likely consequence of unclear data ownership is an increased risk of data breaches due to lack of accountability. Without defined ownership, responsibilities for protecting, monitoring, and governing data are unclear, weakening security and compliance.
Which of the following should be the PRIMARY consideration when establishing an accountability structure for AI governance?
Answer(s): A
The primary consideration in establishing an accountability structure for AI governance is ensuring AI systems are used ethically and responsibly. This underpins trust, compliance, and risk management while aligning AI use with organizational and societal values.
Which of the following is the GREATEST risk associated with using facial recognition authentication for opening bank accounts?
Answer(s): B
The greatest risk is that AI-generated deepfake or synthetic images can fool the authentication system. This represents a serious security and fraud risk, as attackers could bypass identity verification entirely using artificially created facial images.
Which of the following is MOST important for an IS auditor to assess when reviewing logs of prompts and corresponding AI responses?
The most important factor to assess is the disclosure of confidential information in AI responses. Reviewing logs ensures sensitive data is not exposed or mishandled, which is critical for maintaining privacy, security, and regulatory compliance.
Which of the following is the MOST important to ensure an organization's management is fulfilling ethical responsibilities related to AI?
Ensuring that human rights are protected from the potential negative impacts of AI is the most important ethical responsibility. It establishes a foundation of fairness, accountability, and respect for individuals, which underpins all other governance and compliance measures.
A company is developing an AI system to generate videos and images. Which of the following would BEST enable the company to mitigate harm caused by deepfakes?
Watermarking best enables the company to mitigate harm caused by deepfakes. It provides a reliable way to indicate content authenticity and helps distinguish genuine media from AI-generated manipulations.
An audit reveals inconsistencies in the retention period of data used for AI training. What is the BEST recommendation to mitigate this risk?
Answer(s): C
Implementing automated data cleansing tools to enforce retention policies is the best recommendation. This ensures consistent application of data retention requirements, reduces compliance risks, and minimizes the chance of outdated or noncompliant data being used for AI training.
An IS auditor reviewing an AI-based data governance program discovers that there is no formal data classification policy in place. Which of the following is the MOST likely consequence of this gap?
The most likely consequence of not having a formal data classification policy is inappropriate handling of sensitive data during AI model training. Without classification, sensitive information may be exposed, mishandled, or used in violation of compliance requirements.
Share your comments for ISACA AAIA exam with other users:
q.189 - answers are incorrect.
awesome job in getting these questions
i cant find aws certified practitioner clf-c01 exam in aws website but i found aws certified practitioner clf-c02 exam. can everyone please verify the difference between the two clf-c01 and clf-c02? thank you
grazie mille. i got a satisfactory mark in my exam test today because of this exam dumps. sorry for my english.
some of the answers are incorrect. need to be reviewed.
so far so good
i am really liking it
thanks good stuff
need dump c_tadm_23
next time i will write a full review
first time using this site
please sent me oracle 1z0-1105-22 pdf
very helpful
good info about oml
very useful to practice
this website is very helpful.
good content
so challenging
17 should be d ,for morequery its scale out
nice question
yes.
good mateial
good practice exam
impressivre qustion
questions seem helpful
question 21 answer is alerts
am preparing for exam
good one thanks
only got thru 5 questions, need more to evaluate
q26 should be b
the aaa triad in information security is authentication, accounting and authorisation so the answer should be d 1, 3 and 5.
need to attend this
these are free brain dumps i understand, how can one get free pdf