AAISM practice questions 21–30

1. Question 21 · 82 in bank

   A large language model (LLM) has been manipulated to provide advice that serves an attacker's objectives. Which of the following attack types does this situation represent?

   • AData poisoning
   • BEvasion attack
   • CPrivilege escalation
   • DModel inversion

   Show answer

   Answer: B

   Next question

2. Question 22 · 82 in bank

   After deployment, an AI model's output begins to drift outside of the expected range. Which of the following is the development team's BEST course of action?

   • AReturn to an earlier phase in the AI life cycle.
   • BTake the AI model offline.
   • CAdjust the hyperparameters of the AI model.
   • DCreate an emergency change request to correct the issue.

   Show answer

   Answer: A

   Next question

3. Question 23 · 82 in bank

   From a risk perspective, which of the following is the MOST important step when implementing an adoption strategy for AI systems?

   • AEstablishing a comprehensive AI risk assessment framework
   • BImplementing a robust risk analysis methodology tailored to AI-specific tasks
   • CConducting an AI risk assessment and updating the enterprise risk register
   • DBenchmarking against peer organizations' AI risk strategies

   Show answer

   Answer: C

   Next question

4. Question 24 · 82 in bank

   Which of the following is MOST important to monitor in order to ensure the effectiveness of an organization's AI vendor management program?

   • AVendor results in compliance training programs
   • BVendor participation in industry AI research
   • CVendor reviews of external AI threat reports
   • DVendor compliance with AI-related requirements

   Show answer

   Answer: D

   Next question

5. Question 25 · 82 in bank

   Which of the following types of testing can MOST effectively mitigate prompt hacking?

   • AAdversarial
   • BInput
   • CLoad
   • DRegression

   Show answer

   Answer: A

   Next question

6. Question 26 · 82 in bank

   The PRIMARY ethical concern of generative AI is that it may:

   • Acause information integrity issues.
   • Bcause information to become unavailable.
   • Cbreach the confidentiality of information.
   • Dproduce unexpected data that could lead to bias.

   Show answer

   Answer: A

   Next question

7. Question 27 · 82 in bank

   Which of the following is the MOST effective use of AI-enabled tools in a security operations center (SOC)?

   • AEmploying AI-enabled tools to reduce false negatives by detecting subtle attack patterns
   • BReplacing human analysis with automated AI decision-making processes
   • CAssigning AI-enabled tools to triage non-critical alerts to preserve SOC resources
   • DUsing AI-enabled tools exclusively to classify all types of security incidents

   Show answer

   Answer: A

   Next question

8. Question 28 · 82 in bank

   Which of the following recommendations would BEST help a service provider mitigate the risk of lawsuits arising from generative AI's access to and use of internet data?

   • AReview log information that records how data was collected.
   • BDisclose service provider policies to declare compliance with regulations.
   • CActivate filtering logic to exclude intellectual property flags.
   • DAppoint a data steward specialized in AI to strengthen security governance.

   Show answer

   Answer: B

   Next question

9. Question 29 · 82 in bank

   An organization recently introduced a generative AI chatbot that can interact with users and answer their queries. Which of the following would BEST mitigate hallucination risk identified by the risk team?

   • APerforming model testing and validation
   • BEnsuring model developers have been trained in AI risk
   • CFine-tuning the foundational model
   • DTraining the foundational model on large data sets

   Show answer

   Answer: C

   Next question

10. Question 30 · 82 in bank

    An organization plans to implement a new AI system. Which of the following is the MOST important factor in determining the level of risk monitoring activities required?

    • AThe organization's risk appetite
    • BThe organization's risk tolerance
    • CThe organization's number of AI system users
    • DThe organization's compensating controls

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AAISM practice, question 21. 82 questions available.