Free AAISM Exam Braindumps
ISACA Advanced in AI Security Management Questions 111–115 (page: 24)

Updated On: 13-Sep-2026

Which of the following is the BEST way to ensure role clarity and staff effectiveness when implementing AI-assisted security monitoring tools?

  1. Defer implementation until the security team can be expanded with data scientists.
  2. Increase training budgets for business staff to obtain vendor-neutral AI certifications.
  3. Update the security program to include cross-functional AI-specific responsibilities.
  4. Transition responsibilities for AI tools to external consultants for improved scalability.

Answer(s): C

Explanation:

Updating the security program to include cross-functional AI-specific responsibilities ensures clear ownership, defined roles, and effective collaboration, which are essential for successful and sustainable use of AI-assisted security monitoring tools.



Which of the following BEST describes an adversarial attack on an AI model?

  1. Attacking the underlying hardware of the AI system
  2. Providing inputs that mislead the AI model into incorrect predictions
  3. Reverse engineering the AI model using social engineering techniques
  4. Conducting denial of service (DoS) attacks against AI APIs

Answer(s): B

Explanation:

An adversarial attack involves crafting inputs specifically designed to deceive an AI model into making incorrect predictions while appearing normal to humans.



Which of the following BEST enables an organization to strengthen information security controls around the use of generative AI applications?

  1. Ensuring controls exceed industry benchmarks
  2. Monitoring AI outputs against policy
  3. Implementing a kill switch
  4. Validating AI model training data

Answer(s): B

Explanation:

Monitoring AI outputs against policy directly strengthens information security controls by ensuring generated content complies with data handling, confidentiality, and usage requirements, enabling timely detection and response to security violations arising from generative AI use.



A post-incident investigation finds that an AI-powered anti-money laundering system inadvertently allowed suspicious transactions because certain risk signals were disabled to reduce false positives.
Which of the following governance failures does this BEST demonstrate?

  1. Lack of sufficient computing resources for the AI system
  2. Excessive reliance on external consultants for model design
  3. Absence of metrics and dashboard for analysts
  4. Insufficient model validation and change control processes

Answer(s): D

Explanation:

Insufficient model validation and change control processes allowed critical risk signals to be disabled without proper assessment, approval, and testing, resulting in weakened detection capability and missed suspicious transactions.



Which of the following strategies is the MOST effective way to protect against AI data poisoning?

  1. Ensuring the model is trained on diverse data sources
  2. Increasing model complexity to better handle data variations
  3. Using robust data validation techniques and anomaly detection
  4. Incorporating more features and data into model training

Answer(s): C

Explanation:

Robust data validation and anomaly detection are the most effective defenses against data poisoning because they identify and block malicious or corrupted data before it can influence model training or behavior.



Viewing page 24 of 76
Viewing questions 116 - 120 out of 371 questions


Post your Comments and Discuss ISACA AAISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!