A government agency is deploying an AI system to assist with benefits eligibility determinations. The agency must ensure the system is auditable and compliant with administrative law. Which practice is most important to implement?

Maintain detailed logs of model inputs, outputs, and decisions for each case

Use a proprietary model that cannot be explained

Allow the model to make final decisions without human review

Delete all data after each decision to protect privacy

A financial regulator requires a bank to audit its AI credit scoring system. The bank uses a third-party model that is proprietary. The regulator demands transparency into the model's decisions. The vendor refuses to disclose the model's inner workings. What is the most viable path to satisfy the regulator?

Replace the model with a simple linear model

Ask the regulator to accept the vendor's certification

Use model-agnostic explanation techniques to provide decision-level explanations

Terminate the vendor contract immediately

A multinational company is deploying an AI system that processes customer data from the EU and the US. The compliance team must ensure the system meets regulatory requirements while supporting a rollout in both regions. The company already has ISO 42001 certification and uses a major cloud provider with EU and US regions. Which approach best balances compliance and operational efficiency?

Deploy a single AI instance in the EU and have US users access it remotely, assuming the EU region covers all compliance needs.

Deploy separate AI instances in EU and US regions, with data residency controls and a cross-border transfer mechanism such as standard contractual clauses.

Use a third-party AI vendor that claims full GDPR compliance, and transfer all data to their platform regardless of region.

Deploy a single AI instance in the US and rely on the company's ISO 42001 certification to satisfy all regulatory requirements.

Which skill is essential for staff responsible for managing AI systems?

Ability to write marketing copy

Understanding of AI model development and evaluation

A mid-sized company is introducing AI into its customer support operations. The IT team has no prior AI experience. Management wants to ensure the team can handle AI-related incidents and maintain the systems. Which action is most effective for building the necessary skills?

Require all IT staff to become data scientists

Hire a consultant to manage all AI systems permanently

Provide role-based training on AI fundamentals, risks, and incident response

Purchase an AI platform that requires no training

GIAC Security Leadership

Domain 2Objective 5

Managing Artificial Intelligence GSLC Practice Questions (Page 5)

Part of the Technical Security Management domain, which makes up ~27% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~19–32 in this domain), expect 4–6 from this objective — we provide 61 practice questions to prepare you well beyond it. (estimate)

61questions here

13free pages

12concepts

Questions 21–25

21application · medium
A government agency is deploying an AI system to assist with benefits eligibility determinations. The agency must ensure the system is auditable and compliant with administrative law. Which practice is most important to implement?
Select an answer first
22expert · hard
A financial regulator requires a bank to audit its AI credit scoring system. The bank uses a third-party model that is proprietary. The regulator demands transparency into the model's decisions. The vendor refuses to disclose the model's inner workings. What is the most viable path to satisfy the regulator?
Select an answer first
23expert · hard
A multinational company is deploying an AI system that processes customer data from the EU and the US. The compliance team must ensure the system meets regulatory requirements while supporting a rollout in both regions. The company already has ISO 42001 certification and uses a major cloud provider with EU and US regions. Which approach best balances compliance and operational efficiency?
Select an answer first
24foundation · easy
Which skill is essential for staff responsible for managing AI systems?
Select an answer first
25application · medium
A mid-sized company is introducing AI into its customer support operations. The IT team has no prior AI experience. Management wants to ensure the team can handle AI-related incidents and maintain the systems. Which action is most effective for building the necessary skills?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.

Managing Artificial Intelligence GSLC Practice Questions (Page 5)

Questions 21–25

A government agency is deploying an AI system to assist with benefits eligibility determinations. The agency must ensure the system is auditable and compliant with administrative law. Which practice is most important to implement?

Which skill is essential for staff responsible for managing AI systems?

A mid-sized company is introducing AI into its customer support operations. The IT team has no prior AI experience. Management wants to ensure the team can handle AI-related incidents and maintain the systems. Which action is most effective for building the necessary skills?

Keep studying — Technical Security Management