Free AAISM Exam Braindumps
ISACA Advanced in AI Security Management Questions 151–155 (page: 32)

Updated On: 13-Sep-2026

Which of the following BEST ensures AI components are validated as part of disaster recovery testing?

  1. Running simulated data loss scenarios by erasing test records from the AI system's feature store
  2. Disconnecting primary model training clusters to test retraining workflow during extended outages
  3. Simulating denial of service (DoS) attacks against AI APIs to evaluate detection capabilities
  4. Monitoring model performance metrics during failover and recovery to assess system stability

Answer(s): D

Explanation:

Monitoring model performance metrics during failover and recovery directly validates that AI components continue to function correctly and deliver expected outcomes during disaster recovery scenarios, ensuring the AI system remains stable and effective after disruptions.



Who is responsible for implementing recommendations in a final report after an external AI compliance audit?

  1. System architects
  2. Internal auditors
  3. End users
  4. Model owners

Answer(s): D

Explanation:

Model owners are responsible for implementing recommendations from an external AI compliance audit because they have accountability for the AI system’s design, operation, risk management, and ongoing compliance throughout its life cycle.



Which of the following is the BEST control for preventing deepfakes?

  1. System input validation
  2. Regular AI risk assessment
  3. AI governance policies
  4. Output provenance verification

Answer(s): D

Explanation:

Output provenance verification is the most effective control for preventing deepfakes because it enables verification of the origin and authenticity of AI-generated content, allowing organizations and users to detect manipulated or fabricated media reliably.



Which of the following should be the MOST important consideration when conducting an AI impact assessment?

  1. Achieve business objectives
  2. Effect on employee retention
  3. Security awareness training
  4. Reputation of the organization

Answer(s): A

Explanation:

Achieving business objectives is the most important consideration in an AI impact assessment because it ensures the AI system’s purpose, scope, and risks are evaluated in the context of the value it is intended to deliver, guiding proportional governance and risk treatment.



A CISO learns that a video showing an unverified safety issue with the organization's key product has gone viral. The individual in the video often appears to be blurry, and the video contains random lower-quality sections throughout.
Which type of threat is this MOST likely an example of?

  1. Hallucinations
  2. Model drift
  3. Data poisoning
  4. Deepfake

Answer(s): D

Explanation:

The visual artifacts, inconsistent quality, and blurry appearance are characteristic indicators of a deepfake, suggesting the video was likely generated or manipulated using AI to misrepresent a safety issue.



Viewing page 32 of 76
Viewing questions 156 - 160 out of 371 questions


Post your Comments and Discuss ISACA AAISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!