Free AAISM Exam Braindumps
ISACA Advanced in AI Security Management Questions 181–185 (page: 38)

Updated On: 13-Sep-2026

A large corporation has received an influx of sophisticated credential phishing emails and would like to leverage an AI solution to detect and quarantine these messages before they reach employees.
Which of the following blue team AI features is BEST suited to this task?

  1. Large language model (LLM)
  2. Retrieval-augmented generation (RAG)
  3. Natural language processing (NLP)
  4. Natural language generation (NLG)

Answer(s): C

Explanation:

Natural language processing analyzes and classifies the text content of emails to identify linguistic patterns, intent, and indicators commonly associated with credential phishing, enabling automated detection and quarantine before delivery.



Which of the following controls would BEST help to prevent data poisoning in AI models?

  1. Increasing the size of the training data set
  2. Regularly updating the foundational model
  3. Establishing continuous monitoring
  4. Implementing a strict data validation mechanism

Answer(s): D

Explanation:

A strict data validation mechanism prevents malicious or low-integrity data from entering the training pipeline by enforcing provenance checks, integrity controls, sanitization, and quality gates, which directly reduces the risk of data poisoning.



An organization plans to use AI to analyze the shopping patterns of its customers to predict interests and send out targeted, customized marketing emails.
Which of the following should be done FIRST?

  1. Obtain customer consent.
  2. Update the terms of service.
  3. Verify customer email addresses.
  4. Train the marketing department.

Answer(s): A

Explanation:

Customer consent should be obtained first to ensure lawful and ethical processing of customer data for profiling and targeted marketing, before any analysis, prediction, or outreach is performed.



Which of the following would BEST help an organization align its AI initiatives with business objectives?

  1. Protecting enterprise information used by AI projects
  2. Ensuring ethical use of AI technologies in projects
  3. Complying with applicable AI-related regulations
  4. Establishing an AI governance committee

Answer(s): D

Explanation:

An AI governance committee provides the structure to set priorities, define decision rights, approve use cases, allocate resources, and measure outcomes so AI efforts stay tied to business goals rather than drifting into disconnected technical projects.



Which of the following should be included in an AI acceptable use policy?

  1. Ethical and legal compliance standards
  2. AI training data requirements
  3. Data collection and storage processes
  4. AI monitoring requirements

Answer(s): A

Explanation:

An AI acceptable use policy should clearly define what users are allowed to do with AI and the required behavioral guardrails, including ethical expectations and legal/regulatory compliance standards for using AI tools and outputs.



Viewing page 38 of 76
Viewing questions 186 - 190 out of 371 questions


Post your Comments and Discuss ISACA AAISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!