Free AAISM Exam Braindumps
ISACA Advanced in AI Security Management Questions 131–135 (page: 28)

Updated On: 13-Sep-2026

Which of the following would BEST ensure a proper business continuity plan (BCP) is in place for an AI solution?

  1. Enhancing monitoring and detection of model failure and anomalies
  2. Testing the AI infrastructure failover mechanisms
  3. Implementing access controls to protect the AI system from unauthorized use
  4. Increasing the detail of AI solution backup and restoration processes

Answer(s): B

Explanation:

Testing the AI infrastructure failover mechanisms best ensures a proper business continuity plan because it validates that the AI solution can continue operating or recover promptly during disruptions, which is the core objective of business continuity.



Implementing which of the following would MOST effectively address bias in generative AI models?

  1. Data minimization
  2. Data augmentation
  3. Adversarial training
  4. Fairness constraints

Answer(s): D

Explanation:

Fairness constraints directly address bias by enforcing explicit equity requirements during model training or output generation, ensuring that the generative AI model’s behavior aligns with defined fairness objectives across different groups.



Cybersecurity teams should FIRST be embedded in the:

  1. model testing phase.
  2. model deployment phase.
  3. model training phase.
  4. model design phase.

Answer(s): D

Explanation:

Embedding cybersecurity teams in the model design phase ensures security, privacy, and risk requirements are incorporated from the outset, enabling secure-by-design AI systems and preventing downstream vulnerabilities that are harder and costlier to remediate later.



After an organization deploys an AI-based system, a regulator warns of increased risk related to AI re-identification attacks on anonymized data sets.
Which of the following should the information security manager do FIRST?

  1. Assume anonymization is permanent and continue regular business operations.
  2. Immediately delete all anonymized data sets and suspend AI services.
  3. Implement a monitoring program including privacy audits and adversarial testing.
  4. Establish strong access controls for services using anonymized data.

Answer(s): C

Explanation:

Implementing a monitoring program that includes privacy audits and adversarial testing is the first step because it allows the organization to assess whether re-identification risks are actually present, understand exposure, and take evidence-based mitigation actions before making disruptive or irreversible decisions.



Which of the following would BEST protect trade secrets related to AI technologies during their life cycle?

  1. Enforcing trademark rights in AI systems
  2. Restricting access to sensitive data
  3. Patenting AI algorithms along with data sets
  4. Introducing watermarks when generating AI output

Answer(s): B

Explanation:

Restricting access to sensitive data best protects AI-related trade secrets throughout the life cycle by limiting exposure of proprietary models, training data, and processes to only authorized individuals and systems.



Viewing page 28 of 76
Viewing questions 136 - 140 out of 371 questions


Post your Comments and Discuss ISACA AAISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!