AI Incident Response and Business Continuity CRAGE Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A multinational company's AI system that processes personal data has suffered a data breach. The company operates in the EU and other regions. The incident response team has confirmed the breach. What is the most appropriate communication action?

   • AIssue a public press release before notifying regulators.
   • BNotify only the affected users and not the regulators.
   • CNotify the relevant data protection authorities within the required timeframe and inform affected users if required by law.
   • DWait until the investigation is complete before notifying any external parties.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A logistics company uses an AI model for route optimization. The model is deployed on a single GPU server. The company wants to ensure high availability during hardware failures. What is the most effective redundancy strategy?

   • ACreate a backup of the model file on a local disk.
   • BUse a single server with a more reliable power supply.
   • CIncrease the GPU memory on the existing server to handle more load.
   • DDeploy the model on a second GPU server in a different data center and use load balancing.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A healthcare AI system that predicts patient deterioration starts producing incorrect alerts, leading to unnecessary interventions. The incident response team has confirmed the issue and is in the containment phase. Which sequence of actions BEST follows the AI incident response lifecycle?

   • AInvestigate the root cause first, then isolate the model and preserve evidence.
   • BIsolate the model from production, preserve evidence, then investigate the root cause and implement a fix.
   • CNotify all patients and staff about the issue before taking any action.
   • DPreserve evidence, then immediately retrain the model without isolating it.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An online payment provider's fraud detection AI model is hosted on a single cloud region. During a regional outage, the model becomes unavailable and transactions are processed without fraud screening. What should the company implement to ensure high availability and resilience?

   • ACache the model's predictions for all users to avoid calling the model.
   • BRoute all traffic to a human review team during the outage.
   • CDeploy the model to a second cloud region with automatic failover.
   • DIncrease the model's request timeout to allow more time for responses.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary goal of the recovery phase in AI incident response?

   • ATo prevent the incident from happening again
   • BTo restore AI services to normal operation
   • CTo identify the root cause of the incident
   • DTo document the incident for legal purposes
   Reveal Solution Discussion Select an answer first