Describe AI Risk Management Frameworks, Tools, and Techniques. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is developing an AI system for autonomous vehicles. The risk team needs to document potential risks, their likelihood, impact, and mitigation strategies in a structured format. Which tool is most appropriate for this documentation task?

   • ARisk assessment templates
   • BMonitoring systems
   • CModel validation tools
   • DData loss prevention tools
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which type of tool is specifically designed to evaluate the performance and behavior of AI models before and after deployment?

   • AMonitoring systems
   • BData governance platforms
   • CModel validation tools
   • DRisk assessment templates
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   How does AI risk management typically integrate with the NIST Cybersecurity Framework (CSF)?

   • AAI risk management replaces the CSF for all technology-related risks.
   • BAI risk management is a separate process that does not interact with cybersecurity risk management.
   • CAI risk management activities are mapped to the CSF functions such as Govern, Identify, Protect, Detect, Respond, and Recover.
   • DAI risk management only applies to the 'Protect' function of the CSF.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is using an AI system for fraud detection. After a risk assessment, they decide to implement additional human review for transactions flagged by the AI as high-risk. This decision is an example of which risk treatment option?

   • ARisk transfer
   • BRisk acceptance
   • CRisk mitigation
   • DRisk avoidance
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company is using an AI system for hiring. The risk team has identified a risk of bias in the model. They have analyzed the likelihood and impact and are now deciding whether to accept, mitigate, or avoid the risk. They have also communicated the risk to stakeholders. What is the next step in the risk management process?

   • ARisk treatment
   • BRisk evaluation
   • CRisk monitoring
   • DRisk identification
   Reveal Solution Discussion Select an answer first