AI Incident Response and Business Continuity CRAGE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A social media platform's content moderation AI begins incorrectly removing posts from a minority group. The incident is confirmed and the response team is activated. According to the communication protocol, which stakeholders should be notified FIRST?

   • AThe public via a press release.
   • BRegulatory bodies such as data protection authorities.
   • CAffected users whose posts were removed.
   • DInternal incident response team and legal/compliance officers.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An organization wants to test its AI incident response plan without disrupting production systems. What is the most appropriate method?

   • AConduct a tabletop exercise with the incident response team using a simulated AI incident scenario.
   • BReview the plan document and update it without any simulation.
   • CPerform a live failover to the backup AI system during peak hours.
   • DSend a test email to the incident response team asking them to respond.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   An AI incident has been contained and eradicated. The team is now in the recovery phase. What is the most important consideration during recovery?

   • ARestore the AI service from a known-good state and validate that it operates correctly before resuming full operations.
   • BConduct a post-incident review before restoring the service.
   • CImmediately resume full operations to minimize downtime.
   • DDelete all incident-related data to prevent future issues.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is a key benefit of integrating AI incident response with existing organizational incident management?

   • AEnsuring that AI incidents are never escalated
   • BEliminating the need for any incident response plan
   • CReducing the need for documentation
   • DLeveraging established roles and responsibilities for incident handling
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A financial services firm's fraud-detection AI model begins flagging a sudden spike in false positives, causing legitimate transactions to be declined. The on-call engineer notices the anomaly during a routine dashboard review. According to the AI incident response lifecycle, what should the engineer do FIRST?

   • AIsolate the training data used for the model to prevent further degradation.
   • BImmediately roll back the model to the previous production version to stop the false positives.
   • CInitiate the incident response plan and perform triage to assess the impact and severity of the model's behavior.
   • DNotify all affected customers that their transactions may be declined due to a model issue.
   Reveal Solution Discussion Select an answer first