Online Access Free AAIA Exam Questions

Which of the following should be done FIRST when an attacker exfiltrates sensitive information from an AI model?

• A.Implement rate limiting and query restrictions to reduce exploitation attempts.
• B.Isolate impacted systems until the attack vector is identified.
• C.Inform regulators and affected stakeholders of a potential data breach.
• D.Rebuild the AI model using a more secure architecture.

During an audit of an investment organization ' s AI-powered software, an IS auditor identifies a potential security risk. What is the GREATEST risk associated with staff exfiltrating organizational data to a generative AI tool?

• A.Unauthorized data disclosure
• B.Potential business disruptions
• C.Data contamination due to biased AI model outputs
• D.Excessive reliance on AI-generated insights

A car rental company is developing an AI system to dynamically adjust rental pricing based on demand, location, and customer profiles. Which of the following is the MOST important reason to conduct specific testing during development?

• A.To verify that pricing decisions do not result in discriminatory outcomes
• B.To ensure the system integrates seamlessly with legacy booking platforms
• C.To confirm that the AI system can handle high volumes of customer queries
• D.To ensure the model's pricing logic aligns with business strategy

A digital bank utilizes an AI system to generate credit scores. Which of the following would BEST mitigate the risk of sudden and unexplained changes in a borrower's credit score?

• A.Allowing the AI to operate fully autonomously to prevent processing delays
• B.Obtaining and validating the credit scores from third-party agencies to cross-check AI-generated results
• C.Using only data from the last six months to one year to avoid outdated information affecting the credit score
• D.Ensuring the system is periodically reviewed and calibrated by human experts to maintain stability in predictions

During a walk-through, an IS auditor observes an AI engineer entering a prompt that manipulates the AI model's behavior. Which of the following is the BEST control to prevent this?

• A.Encrypt the underlying data
• B.Enforce an input/output template
• C.Deploy adversarial training
• D.Retrain the model immediately