ISACA AAIA Exam Prep
ISACA Advanced in AI Audit (Page 21 )

Updated On: 10-Sep-2026

Which of the following should be of GREATEST concern to an IS auditor when reviewing ethical considerations for an AI solution?

  1. The decision-making process is unexplainable.
  2. The solution is hosted on a shared cloud environment.
  3. The model has not been retrained recently.
  4. The solution documentation is still in draft.

Answer(s): A

Explanation:

An unexplainable decision-making process is the greatest ethical concern because stakeholders cannot understand, justify, or challenge the AI’s outcomes, creating risks of unfair, biased, or unaccountable decisions.



Which of the following would pose the GREATEST risk when reviewing AI acceptable use training content?

  1. The content does not cover the use of effective prompting.
  2. The content does not cover the non-deterministic nature of AI.
  3. The content does not cover AI model architectures.
  4. The content does not cover required performance metrics.

Answer(s): B

Explanation:

Failing to address the non-deterministic nature of AI creates the greatest risk because users may incorrectly assume AI outputs are consistent, predictable, or authoritative. This misunderstanding can lead to overreliance on AI, improper validation of outputs, and significant governance and compliance issues.



An IS auditor is reviewing an AI application that uses customer data to refine the organization's marketing outreach strategies.
Which of the following should be the auditor's PRIMARY focus during this review?

  1. Alignment with organizational AI strategies
  2. Access control design and effectiveness
  3. Compliance with applicable privacy regulations
  4. Escalation protocols for sensitive data breaches

Answer(s): C

Explanation:

When customer data is used for AI-driven marketing, the primary risk is improper handling of personal data. Ensuring compliance with privacy regulations is essential to prevent unauthorized use, protect customer rights, and avoid legal or regulatory violations.



An organization is training a skin cancer recognition model. Photographs collected from which of the following sources would present the GREATEST risk associated with data integrity?

  1. Research facility receiving grants for cancer research
  2. Open-source data augmentation file
  3. Social media platform with images from all over the world
  4. Cohort of dermatologists with signed patient consent forms

Answer(s): C

Explanation:

Images from a social media platform pose the greatest data integrity risk because they lack verified clinical labeling, consistent image quality, and controlled collection conditions. This greatly increases the likelihood of incorrect or misleading training data for a medical diagnostic model.



An IS auditor examining change management procedures for an AI system observes inconsistent training data validation and verification protocols prior to model retraining.
Which of the following is the MOST significant risk in this context?

  1. Addition of AI model complexity due to inconsistent data inputs
  2. Noncompliance due to inadequate model training documentation
  3. Degradation of system reliability due to compromised or substandard data
  4. Delays in AI model retraining due to procedural inefficiencies

Answer(s): C

Explanation:

Inconsistent validation and verification of training data can allow corrupted, low-quality, or improperly prepared data into the retraining process, directly degrading the AI system’s reliability. This risk is more significant than documentation or timing issues because compromised data undermines the integrity and trustworthiness of the model’s outputs.



Viewing page 21 of 113
Viewing questions 101 - 105 out of 536 questions


Post your Comments and Discuss ISACA AAIA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!