An organization develops and implements an AI-based plug-in for users that summarizes their individual emails. Which of the following is the GREATEST risk associated with this application?
Answer(s): D
An AI-based email summarization plug-in processes sensitive personal and business information. If parameters controlling data access, processing scope, or output are insufficiently restricted, the application could expose confidential content, mishandle sensitive information, or generate inaccurate summaries, posing the greatest risk.
Which of the following is the GREATEST benefit of implementing an AI tool to safeguard sensitive data and prevent unauthorized access?
Answer(s): A
AI tools that monitor sensitive data and access patterns can quickly detect anomalies or potential breaches. Early detection enables prompt initiation of incident response, minimizing the impact of unauthorized access and improving overall data security posture.
Which of the following would BEST help mitigate vulnerabilities associated with hidden triggers in generative AImodels?
Adversarial training involves deliberately introducing challenging or malicious inputs during model development to identify hidden triggers. By exposing these vulnerabilities, the AI model can be adjusted or fortified, reducing the risk of malicious activation of undesired behaviors.
Which of the following is the MOST important course of action prior to placing an in-house developed AI solution into production?
Before deploying an AI solution into production, it is critical to thoroughly test and validate its performance, accuracy, and reliability. Verification ensures the system meets design specifications, while validation confirms it fulfills intended use cases. This step mitigates operational, ethical, and regulatory risks.
Which of the following is a key risk indicator (KRI) for an AI system used for threat detection?
Frequent overrides indicate that the AI system’s threat detection outputs are often incorrect or require human correction. Monitoring this KRI helps assess the system’s reliability, effectiveness, and risk exposure, guiding improvements and governance decisions.
The PRIMARY benefit of implementing moderation controls in generative AI applications is that it can:
Moderation controls act as a safeguard to detect and block outputs that are offensive, unsafe, or otherwise inappropriate. This reduces ethical, legal, and reputational risks associated with generative AI applications while maintaining user trust.
Which of the following should be a PRIMARY consideration when defining recovery point objectives (RPOs) and recovery time objectives (RTOs) for generative AI solutions?
Answer(s): C
For generative AI solutions, the latest model versions capture critical learned patterns and performance improvements. Preserving these ensures that, after a disruption, the AI system can resume accurate and reliable functionality, aligning recovery objectives with operational and business requirements.
Which of the following is the MOST effective use of AI in incident response?
Answer(s): B
AI can rapidly analyze alerts, prioritize incidents, and categorize threats, enabling faster and more efficient triage. This reduces human workload, accelerates response times, and ensures that critical incidents receive immediate attention, enhancing the overall effectiveness of incident response.
Share your comments for ISACA AAISM exam with other users:
please upload the practice questions
need this dumps
preparing for this exam is overwhelming. you cannot pass without the help of these exam dumps.
new to this site but i feel it is good
the correct answer to q8 is b. explanation since the mule app has a dependency, it is necessary to include project modules and dependencies to make sure the app will run successfully on the runtime on any other machine. source code of the component that the mule app is dependent of does not need to be included in the exported jar file, because the source code is not being used while executing an app. compiled code is being used instead.
good questions
Delayed the exam until December 29th.
A and D are True
good one with explanation
This is one of the most useful study guides I have ever used.
Keeping this site free takes real effort. We constantly battle automated scraping and unauthorized content copying. A quick account helps us protect the community and keep the site free.
To continue studying for your AAISM, please sign in or create a free account.