AI Incident Response and Business Continuity CRAGE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of conducting a tabletop exercise for AI incident response?

   • ATo permanently shut down the AI system
   • BTo deploy a new AI model to production
   • CTo test the incident response plan in a simulated, discussion-based environment
   • DTo train the AI model on new data
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A large enterprise has an existing IT incident management framework based on ITIL. The AI governance team wants to ensure AI incidents are handled consistently with other IT incidents. What should they do?

   • AMap AI incident response procedures to the existing incident management framework and define escalation paths for AI-specific issues.
   • BUse the existing IT incident management process without any modifications for AI incidents.
   • CCreate a completely separate incident response process for AI incidents to avoid confusion.
   • DWait until an AI incident occurs to determine how to integrate the processes.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   During an AI incident investigation, the response team needs to preserve evidence for potential legal action. What is the MOST appropriate way to handle the evidence?

   • AMove the original logs to a separate folder on the same server to keep them safe.
   • BEmail the logs to the legal team for safekeeping.
   • CDelete any logs that contain personal data to comply with privacy regulations.
   • DCreate a forensic copy of all relevant logs, model versions, and data snapshots and store them in a secure, tamper-evident location.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard · select all that apply

   A financial trading firm's AI model that predicts market trends relies on real-time market data feeds. During a major market disruption, the data feeds become unreliable, and the model starts making poor trading decisions. The firm wants to update its business continuity plan to address this AI-specific dependency. Which of the following should the plan include? Select all that apply.

   • AA redundant data feed from a second provider to ensure availability.
   • BA manual trading desk that can take over if the AI system is unavailable.
   • CA requirement to shut down trading during any data feed disruption.
   • DA fallback mechanism that uses delayed or historical market data until the feeds are restored.
   • EA policy to continue using the model without any data updates.
   Check answers Discussion Select an answer first
6. 15application · easy

   A bank's AI-based credit scoring system relies on a data pipeline that aggregates customer data from multiple sources. The bank is creating a business continuity plan. What is a key AI-specific dependency to address?

   • AThe interest rates set by the central bank.
   • BThe availability of the data pipeline and the model serving infrastructure.
   • CThe physical security of the bank's branches.
   • DThe number of customer service representatives available.
   Reveal Solution Discussion Select an answer first