AI Incident Response and Forensics COASP Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   During an AI incident response, which legal obligation is most directly triggered when personal data is involved?

   • APublishing the incident details on social media
   • BTransferring all data to a third party for analysis
   • CDeleting all logs to protect privacy
   • DNotifying affected individuals and regulatory authorities as required by data protection laws
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A financial services company has a real-time fraud detection model that has been compromised by a backdoor. The backdoor is triggered by a specific pattern in transaction data. The company must contain the incident without stopping the model's service, as stopping it would cause significant financial losses. Which containment strategy is MOST appropriate?

   • ARetrain the model on a clean dataset while keeping the compromised model in production
   • BDeploy an input filter that blocks or quarantines transactions containing the trigger pattern before they reach the model
   • CDisable the model's API and require all transactions to be approved by a human
   • DShut down the model and route all transactions to a manual review process
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is the primary objective of the eradication phase in AI incident response?

   • ATo remove the root cause and malicious artifacts from the AI system
   • BTo preserve evidence for legal proceedings
   • CTo identify the attacker's identity
   • DTo restore the system to normal operation
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   In the context of AI incident response, which phase immediately follows the identification of a potential AI-related security incident?

   • AContainment
   • BRecovery
   • CTriage and analysis
   • DEradication
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   What is the primary purpose of an AI incident response playbook?

   • ATo provide step-by-step guidance for responding to specific AI-related threats
   • BTo replace the need for human decision-making during incidents
   • CTo document all possible AI attacks ever discovered
   • DTo serve as a legal defense in case of an incident
   Reveal Solution Discussion Select an answer first