Identify and Manage the Risks Associated with Emerging Technologies, Such as AI. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Why is continuous monitoring important for emerging technology risks?

   • ABecause risks are static and do not change over time
   • BBecause monitoring eliminates all risks
   • CBecause emerging technologies and their threat landscape evolve rapidly
   • DBecause it is required by all regulatory frameworks
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A financial trading firm is considering an AI system that executes high-frequency trades. The system's risk assessment shows a low likelihood of a catastrophic failure, but the impact would be extremely high, potentially causing significant financial loss. The firm's risk appetite is moderate, and it has a strong compliance team. The AI system could generate substantial profits. What is the most balanced risk management approach?

   • ATransfer the risk entirely by purchasing insurance and not implementing any safeguards.
   • BImplement the system with robust safeguards, including kill switches, real-time monitoring, and a formal risk acceptance for the residual risk.
   • CAccept the risk without any safeguards because the likelihood is low.
   • DAvoid the risk by not implementing the AI trading system.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which risk management strategy involves transferring the financial impact of a risk to another party?

   • ARisk mitigation
   • BRisk avoidance
   • CRisk acceptance
   • DRisk transfer
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A social media company is using an AI content moderation system. The system sometimes flags legitimate posts as harmful (false positives) and sometimes misses harmful posts (false negatives). The company wants to reduce the risk of both types of errors. What is the most balanced approach?

   • AUse a completely different AI model that has no errors.
   • BAdjust the model's threshold to balance precision and recall based on the company's risk tolerance for each error type.
   • CSet the threshold to eliminate all false negatives, accepting more false positives.
   • DSet the threshold to eliminate all false positives, accepting more false negatives.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A cybersecurity firm has deployed an AI-based intrusion detection system (IDS). The system was trained on network traffic from the past two years. The firm's security team notices that the IDS is generating an increasing number of false alarms for new types of traffic. What is the most likely cause of this emerging technology risk?

   • AThe IDS hardware is failing and needs to be replaced.
   • BThe security team is misconfiguring the IDS alert settings.
   • CThe model's training data is becoming outdated as network traffic patterns evolve.
   • DThe network is under a large-scale cyber attack.
   Reveal Solution Discussion Select an answer first