Objective 3.5 Identify and Mitigate Safety and Security Risks CERTIFIED-ETHICAL-EMERGING-TECHNOLOGIST Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is an example of a safety or security risk that originates from an environmental factor in an emerging technology deployment?

   • AA developer accidentally leaves default credentials on a cloud server.
   • BA ransomware attack encrypts an organization's data files.
   • CA software bug causes a robot to move unexpectedly.
   • DA power outage at a data center causes an AI model training job to fail.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A smart home device manufacturer is designing a new voice-activated assistant. The device will be placed in living rooms and will listen for voice commands. The manufacturer wants to apply Security-by-Design to protect user privacy. Which practice is most aligned with this goal?

   • AProcess voice commands locally on the device and only send anonymized data to the cloud when necessary.
   • BAllow the device to record continuously and rely on user consent to cover all data collection.
   • CUse a single shared encryption key for all devices to simplify key management.
   • DStore all voice recordings in the cloud for future feature development and model training.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A hospital is deploying an AI-based patient triage system that relies on continuous data feeds from IoT vital-sign monitors. During a pilot, the system occasionally misclassifies patients when a nurse enters a reading manually after a sensor battery dies. The hospital wants to reduce the risk of misclassification caused by this workflow gap. What should the hospital do first?

   • AConduct a threat model that maps the sensor failure and manual-entry workflow to potential misclassification scenarios.
   • BDeploy a SIEM system to monitor the network traffic between the IoT monitors and the triage application.
   • CRequire all nurses to complete additional training on the correct procedure for manual vital-sign entry.
   • DImplement a defense-in-depth strategy by adding a second AI model to cross-check the triage results.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which Security-by-Design practice ensures that users and processes are granted only the minimum permissions necessary to perform their required functions?

   • ASecure coding
   • BDefense in depth
   • CPrivacy by design
   • DLeast privilege
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A healthcare startup is building a mobile app that uses AI to provide personalized wellness recommendations. The app will collect sensitive health data from users. The startup wants to implement privacy by design. Which action best reflects this principle?

   • AStore all health data in a centralized database to simplify analysis and backup procedures.
   • BCollect all available health data from the user's device to improve the AI model's accuracy over time.
   • CCollect only the minimum health data necessary for the recommendation feature and delete it when no longer needed.
   • DShare anonymized health data with third-party researchers to contribute to public health studies.
   Reveal Solution Discussion Select an answer first