An organization is adopting an agentic AI solution from an external vendor to support its internal IT operations. To evaluate the security posture of this system, which of the following provides the MOST reliable and independently verifiable evidence of implemented security controls?
Answer(s): B
Third-party audit reports provide independently validated and verifiable assurance that security controls are designed and operating effectively, making them the most reliable evidence when assessing the security posture of an external vendor’s agentic AI solution.
When preparing for an AI incident, which of the following should be done FIRST?
Establishing a cross-functional incident response team with AI knowledge is the first step because effective preparation depends on having the right expertise and roles in place to design communication paths, containment actions, and recovery processes for AI-related incidents.
Which of the following is the MOST effective action an organization can take to address data security risk when using generative AI features in an application?
Answer(s): C
Establishing policies and awareness training for acceptable use of AI directly reduces data security risk by preventing sensitive data from being improperly input, shared, or exposed through generative AI features at the point of use.
An organization implementing a large language model (LLM) application notices significant and unexpected cost increases due to excessive computational resource usage. Which vulnerability is MOST likely in need of mitigation?
Unbounded consumption leads to uncontrolled use of computational resources by the LLM application, resulting in unexpected and excessive costs, making it the most relevant vulnerability to mitigate in this scenario.
Which of the following is BEST for analyzing true positives, true negatives, false positives, and false negatives produced by an AI model?
A confusion matrix provides a complete breakdown of true positives, true negatives, false positives, and false negatives, making it the most effective tool for analyzing model classification outcomes.
Post your Comments and Discuss ISACA AAISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AAISM content, but please register or login to continue.