Which of the following is an example of integrating emerging technology risk into overall cybersecurity risk communication?

Including AI-related risks in the organization's regular risk register and reporting to the board

Deleting AI risk assessments after initial review

Keeping AI risk assessments separate from other risk reports

Discussing AI risks only within the IT department

A retail company is considering an AI system to forecast inventory demand. The system will use customer purchase data, including personally identifiable information (PII). The company must comply with data privacy regulations. What is the most important factor to include in the risk assessment?

The accuracy of the AI system's demand forecasts compared to current methods.

The availability of the AI system during peak shopping seasons.

The cost of the AI software license and ongoing maintenance.

The likelihood and impact of a data breach involving the PII used to train and operate the AI system.

A technology company has developed an AI feature that will be added to its consumer product. The risk assessment identified a moderate risk of the feature being used maliciously by users to harm others. The product team wants to launch quickly to beat competitors, while the legal team wants to delay for a full review. The CISO must communicate the risk to the executive team to support a decision. What is the most effective communication approach?

Present the risk in terms of potential reputational harm, legal liability, and user trust, and outline options for mitigation, acceptance, or delay.

Provide the full technical risk assessment to the executive team and let them interpret it.

Recommend immediate launch because the risk is only moderate and the company needs to beat competitors.

Delay the decision by asking for more data, even though the risk assessment is complete.

What is the primary purpose of integrating emerging technology risk into the overall cybersecurity risk management framework?

To ensure that emerging technology risks are considered alongside other cybersecurity risks in decision-making

To eliminate all risks associated with emerging technologies

To isolate emerging technology risks from other cybersecurity risks

To transfer all emerging technology risks to external parties

Which of the following is a unique risk introduced by AI systems that is not typically associated with traditional software?

Denial-of-service attacks on web servers

Phishing emails targeting employees

Unauthorized access to a database

Data bias leading to unfair or discriminatory outcomes

Dell NIST Cybersecurity Framework v2.0

Domain 10Objective 5

Identify and Manage the Risks Associated with Emerging Technologies, Such as AI. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 1)

Part of the Assess Cybersecurity Risk Communication and Integration domain, which accounts for 10% of the NIST-CYBERSECURITY-FRAMEWORK-2 exam.

31questions here

7free pages

6concepts

10%of the exam

Questions 1–5

1foundation · easy
Which of the following is an example of integrating emerging technology risk into overall cybersecurity risk communication?
Select an answer first
2application · medium
A retail company is considering an AI system to forecast inventory demand. The system will use customer purchase data, including personally identifiable information (PII). The company must comply with data privacy regulations. What is the most important factor to include in the risk assessment?
Select an answer first
3expert · hard
A technology company has developed an AI feature that will be added to its consumer product. The risk assessment identified a moderate risk of the feature being used maliciously by users to harm others. The product team wants to launch quickly to beat competitors, while the legal team wants to delay for a full review. The CISO must communicate the risk to the executive team to support a decision. What is the most effective communication approach?
Select an answer first
4foundation · easy
What is the primary purpose of integrating emerging technology risk into the overall cybersecurity risk management framework?
Select an answer first
5foundation · easy
Which of the following is a unique risk introduced by AI systems that is not typically associated with traditional software?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NIST-CYBERSECURITY-FRAMEWORK-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “NIST-CYBERSECURITY-FRAMEWORK-2” is a trademark of its owner, used for identification only.