AI Incident Response and Business Continuity CRAGE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which element is a unique dependency that must be addressed in a business continuity plan for AI systems?

   • AData pipelines
   • BEmployee badges
   • COffice furniture
   • DEmail servers
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   After a ransomware attack that encrypted the data pipeline for a recommendation engine, the incident response team has contained the breach and eradicated the malware. The company's business continuity plan includes a recovery time objective (RTO) of 4 hours for the recommendation service. What should the team do to meet the RTO?

   • AConduct a post-incident review before restoring any services.
   • BRestore the data pipeline from the most recent clean backup and validate the model's outputs before resuming service.
   • CSwitch to a manual recommendation process while the pipeline is rebuilt from scratch.
   • DRe-deploy the model from the last known-good version without checking the data pipeline.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A retail company's AI-powered inventory forecasting system depends on a nightly data pipeline that ingests sales data from multiple sources. During a regional outage, the pipeline fails and the model cannot produce forecasts. What should the business continuity plan include to address this AI-specific dependency?

   • AA fallback mechanism that uses the last known good forecast until the pipeline is restored.
   • BA policy to ignore the outage and continue using the model without new data.
   • CA requirement to manually re-enter all sales data into the system during the outage.
   • DA plan to shut down the AI system until the pipeline is fully operational.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   During an AI incident, the response team needs to preserve evidence for potential litigation. What is the most important action to take?

   • AReboot the system to clear any malicious processes.
   • BSnapshot the model's memory and log all system interactions with timestamps.
   • CDelete any suspicious data to prevent further contamination.
   • DWait until the incident is fully resolved before collecting any evidence.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the main purpose of a post-incident review in AI incident response?

   • ATo assign blame to individuals responsible for the incident
   • BTo immediately restore services without further analysis
   • CTo improve future incident response by identifying lessons learned
   • DTo delete all evidence of the incident
   Reveal Solution Discussion Select an answer first