ISACA AAIA Exam Prep
ISACA Advanced in AI Audit (Page 5 )

Updated On: 10-Sep-2026

An organization uses an AI image generation platform to create promotional materials. An IS auditor identifies that the platform includes copyrighted images in its training data.
Which of the following is the auditor’s BEST recommendation to address this issue?

  1. Suspend the use of the platform until the training data is sanitized.
  2. Label all AI-generated images to disclaim the possibility of third-party content.
  3. Implement a manual review process to ensure no copyrighted images are used in generated outputs.
  4. Use a platform that certifies the provenance and licensing of its training data.

Answer(s): D

Explanation:

The best recommendation is to use a platform that certifies the provenance and licensing of its training data. This ensures that the AI-generated content does not infringe on copyrighted material, reducing legal and reputational risks for the organization.



A bank uses a video-based know your customer (KYC) verification process. Cybercriminals exploit this process by using deepfake technology to impersonate bank customers.
Which of the following countermeasures is the BEST way for the bank to mitigate this risk?

  1. Discontinuing the use of the video-based verification process
  2. Encrypting all customer data and communication
  3. Requesting additional identity and address documents for verification
  4. Leveraging AI-based liveness detection during video verification

Answer(s): D

Explanation:

The best countermeasure is to leverage AI-based liveness detection during video verification. This technology can detect whether the video feed comes from a real, live person rather than a pre-recorded or deepfake video, effectively mitigating impersonation risks.



Which of the following is an IS auditor's MOST important course of action when determining whether source data should be entered into approved generative AI tools to assist with an audit?

  1. Validate that the tool is leveraging the latest model.
  2. Validate that the tool provides a privacy notice.
  3. Determine whether the information is reliable.
  4. Determine whether any AI model hallucinations have occurred.

Answer(s): C

Explanation:

The most important course of action is to determine whether the information is reliable before entering source data into generative AI tools. Ensuring data reliability safeguards audit integrity and helps prevent the propagation of errors or unauthorized disclosures in AI-assisted analysis.



An AI social media platform uses an algorithm to increase user engagement that could unintentionally promote divisive content.
Which of the following is the BEST course of action to mitigate this risk?

  1. Introduce controls allowing individuals to customize content preferences.
  2. Regularly audit and adjust algorithms to reduce biases.
  3. Obtain users' consent for the content they wish to view.
  4. Suspend the algorithm until concerns are addressed.

Answer(s): B

Explanation:

The best course of action to mitigate the risk of unintentionally promoting divisive content is to regularly audit and adjust algorithms to reduce biases. This proactive approach helps ensure that engagement-driven algorithms align with ethical standards and do not amplify harmful or polarizing material.



Which use case for an AI model to be used by a food delivery service would pose ethical risk to the organization?

  1. Using customer service metrics for service speed and food quality to predict customer retention and forecast revenue
  2. Comparing total food preparation and delivery time to an industry benchmark to set key performance and risk indicators for individual restaurants
  3. Basing driver retention and termination decisions on the number of delivered orders per total hours worked as compared to an industry benchmark
  4. Correlating time, cost, delivery distance, and customer satisfaction metrics to issue coupons to customers receiving substandard service

Answer(s): C

Explanation:

Basing driver retention and termination decisions on the number of delivered orders per total hours worked compared to an industry benchmark poses the greatest ethical risk. This practice may unfairly penalize workers without accounting for contextual factors (e.g., traffic, order volume, location), leading to biased or discriminatory employment outcomes.



Viewing page 5 of 113
Viewing questions 21 - 25 out of 536 questions


Post your Comments and Discuss ISACA AAIA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!