Which of the following is the MOST effective control to prevent a white box attack on an AI model?
Answer(s): D
Masking key model information reduces an attacker’s access to sensitive details such as model architecture, parameters, logic, and internal workings. Because white box attacks rely on extensive knowledge of the target model, restricting or obscuring this information directly reduces the attacker’s ability to analyze and exploit the model.
Which of the following is the MOST effective way to protect against deepfake-enabled social engineering attacks?
Answer(s): A
Liveness detection helps verify that a person interacting with a system is physically present rather than represented by manipulated or synthetic audio, video, or imagery. This directly addresses deepfake-enabled impersonation and is therefore the most effective control against this type of social engineering attack.
An organization is preparing to deploy a machine learning (ML) model for automated loan approval decisions.Which of the following should be given the HIGHEST priority before deployment?
Answer(s): C
Bias and fairness testing should receive the highest priority because automated loan approval directly affects individuals and can create discriminatory outcomes if the model treats demographic groups unfairly. Evaluating fairness before deployment helps ensure decisions are equitable, defensible, and aligned with regulatory and governance expectations.
Which of the following is an IS auditor’s BEST recommendation to mitigate ethical risk resulting from AI system fabricating sources that could influence legal rulings?
Answer(s): B
A formal source-verification process directly addresses the risk of fabricated citations influencing legal decisions. Requiring authoritative validation before AI-generated sources are relied upon helps ensure that legal analysis is based on genuine, accurate, and traceable evidence.
A financial system uses an AI algorithm that learns from past payment history to detect unauthorized payment attempts.Which of the following is the GREATEST benefit when clear accountability is defined for this process?
Clear accountability ensures that responsibility for AI-enabled fraud detection is explicitly assigned and aligned with organizational objectives. This gives senior management greater assurance that fraud risk is being actively governed and managed in support of the business.
Post your Comments and Discuss ISACA AAIA exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AAIA content, but please register or login to continue.