Which of the following insider threats involving the use of AI would present the GREATEST risk?
Answer(s): D
Exfiltrating sensitive data presents the greatest risk because it results in direct loss of confidentiality, potential regulatory violations, and severe organizational harm. AI tools can amplify this threat by enabling large-scale or automated extraction of sensitive information.
Which of the following is the BEST recommendation to mitigate excessive agency when implementing an AI system as a browser extension?
Answer(s): A
Minimizing browser extension functionality reduces the system’s autonomous actions and limits unintended behaviors, thereby mitigating excessive agency and ensuring the AI operates within controlled and intended boundaries.
An organization is reviewing its existing data governance framework after implementing an AI-based document repository solution. Which of the following should be the PRIMARY consideration for the organization?
Answer(s): B
Data classification is the primary consideration because AI-based document repositories rely heavily on properly categorized data to ensure appropriate access, handling, protection, and compliance throughout the AI life cycle.
An IS auditor is reviewing change documentation of an AI model. Which of the following would pose the GREATEST risk?
Answer(s): C
A low number of test scenarios poses the greatest risk because insufficient testing fails to validate model behavior across normal, edge, and high-risk conditions. This increases the likelihood that significant errors, bias, or failures will go undetected before deployment.
What is the MOST important reason government organizations should provide regular AI training programs for all staff?
Regular AI training ensures staff remain current on ethical considerations, promoting responsible and compliant use of AI systems within government organizations where ethical and legal standards are critical.
Post your Comments and Discuss ISACA AAIA exam prep with other Community members: