An organization decides to use an anomaly-based intrusion detection system (IDS) integrated with a generative adversarial network enabled AI tool. The integrated tool would MOST effectively detect intrusions by leveraging:
Answer(s): D
Generative adversarial networks can create realistic synthetic intrusion data, which enhances training coverage for rare or novel attack patterns and significantly improves the effectiveness of anomaly-based intrusion detection.
A financial organization is concerned about the risk of prompt injection attacks on its customer service chatbot. Which of the following controls BEST addresses this concern?
Answer(s): B
Input validation directly addresses prompt injection risk by constraining, sanitizing, and filtering user inputs, preventing malicious prompts from manipulating the chatbot’s behavior or accessing unauthorized information.
Which of the following is the MOST important consideration when an organization is adopting generative AI for personalized advertising?
Reputational risk is the most important consideration because generative AI used for personalized advertising can produce inappropriate, biased, or intrusive content, which can quickly damage customer trust and brand reputation if perceived as unethical or manipulative.
Which of the following is MOST important for effective AI risk management?
Internal stakeholder participation is most important because effective AI risk management depends on cross-functional involvement to identify, assess, and manage risks across technical, business, legal, ethical, and security domains throughout the AI life cycle.
An organization is looking to purchase an AI application from a vendor but is concerned about the security of its data. Which of the following is the MOST effective way to address this concern?
Answer(s): C
Ensuring vendors disclose how the application uses the organization’s data directly addresses data security concerns by providing transparency into data handling, processing, storage, and reuse practices, which is essential for assessing confidentiality, privacy, and misuse risk before procurement.
Post your Comments and Discuss ISACA AAISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AAISM content, but please register or login to continue.