A company is developing an AI system to screen job applications. The company wants to ensure the system is fair and does not discriminate against protected groups. Which actions should the company take? (Select all that apply.)

Document all decisions and model changes for accountability.

Conduct regular bias audits using fairness metrics.

Remove protected attributes from the training data.

Involve diverse stakeholders in the design and review of the system.

Use a single fairness metric to determine if the system is fair.

A healthcare provider is considering a vendor's AI diagnostic tool. The vendor provides a detailed data sheet, but the provider's security team has limited visibility into the model's training data and internal testing. The vendor offers an API with audit logs and a service-level agreement (SLA) with 99.9% uptime. The provider must ensure patient safety and regulatory compliance. Which action is most important before signing the contract?

Require the vendor to provide model documentation, including training data provenance, validation results, and independent third-party audit reports.

Sign the contract and plan to monitor the model's performance after deployment.

Accept the SLA and rely on the vendor's uptime guarantee to ensure availability for patient care.

Perform a penetration test on the vendor's API before signing the contract.

Which of the following is a recognized governance framework specifically designed for managing AI risks?

NIST AI Risk Management Framework

A team is developing a new AI model for detecting fraudulent insurance claims. The team is in the design phase and must decide on the data sources and model architecture. Which practice is most important to incorporate during the design phase?

Collect as much data as possible, including data from unverified sources, to improve the model's training.

Select the most complex model architecture available to maximize accuracy.

Define clear success criteria and establish a process for validating the model's performance against those criteria.

Defer security considerations until after the model is deployed to avoid slowing down development.

What is the purpose of auditing an AI system?

To increase the model's accuracy

To verify that the system meets compliance, performance, and security requirements

GIAC Security Leadership

Domain 2Objective 5

Managing Artificial Intelligence GSLC Practice Questions (Page 12)

Part of the Technical Security Management domain, which makes up ~27% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~19–32 in this domain), expect 4–6 from this objective — we provide 61 practice questions to prepare you well beyond it. (estimate)

61questions here

13free pages

12concepts

Questions 56–60

56application · medium · select all that apply
A company is developing an AI system to screen job applications. The company wants to ensure the system is fair and does not discriminate against protected groups. Which actions should the company take? (Select all that apply.)
Select an answer first
57expert · hard
A healthcare provider is considering a vendor's AI diagnostic tool. The vendor provides a detailed data sheet, but the provider's security team has limited visibility into the model's training data and internal testing. The vendor offers an API with audit logs and a service-level agreement (SLA) with 99.9% uptime. The provider must ensure patient safety and regulatory compliance. Which action is most important before signing the contract?
Select an answer first
58foundation · easy
Which of the following is a recognized governance framework specifically designed for managing AI risks?
Select an answer first
59application · medium
A team is developing a new AI model for detecting fraudulent insurance claims. The team is in the design phase and must decide on the data sources and model architecture. Which practice is most important to incorporate during the design phase?
Select an answer first
60foundation · easy
What is the purpose of auditing an AI system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.