A company's security operations center (SOC) is adding AI-based threat detection. The SOC analysts are familiar with traditional security tools but not with AI. What is the most important training topic for the analysts?

How to build AI models from scratch

How to configure network firewalls

How to interpret AI model outputs and handle false positives

A multinational corporation is deploying an AI system that processes personal data of EU citizens. The legal team wants to ensure compliance with GDPR. Which action is most directly required by GDPR for AI systems?

Ensure the AI model is open source

Obtain a patent for the AI algorithm

Store all data on-premises in the EU

Conduct a Data Protection Impact Assessment (DPIA) for high-risk processing

Which of the following is a unique security risk introduced by AI systems that is not typically present in traditional software?

Adversarial attacks that manipulate model inputs to cause misclassification

A retail company is considering a third-party AI service for customer sentiment analysis. The vendor claims the service is compliant with GDPR and provides a model that was trained on public social media data. The company's legal team is concerned about data protection and auditability. Which due diligence step is most important before signing the contract?

Ask the vendor to share the model's training code

Request the vendor's data processing agreement and audit reports

Require the vendor to store all data on-premises

Accept the vendor's verbal assurance of compliance

Which of the following is a key component of an AI audit?

Changing the model's activation function

Reviewing model documentation and decision logs

Increasing the model's training epochs

GIAC Security Leadership

Domain 2Objective 5

Managing Artificial Intelligence GSLC Practice Questions (Page 9)

Part of the Technical Security Management domain, which makes up ~27% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~19–32 in this domain), expect 4–6 from this objective — we provide 61 practice questions to prepare you well beyond it. (estimate)

61questions here

13free pages

12concepts

Questions 41–45

41application · medium
A company's security operations center (SOC) is adding AI-based threat detection. The SOC analysts are familiar with traditional security tools but not with AI. What is the most important training topic for the analysts?
Select an answer first
42application · medium
A multinational corporation is deploying an AI system that processes personal data of EU citizens. The legal team wants to ensure compliance with GDPR. Which action is most directly required by GDPR for AI systems?
Select an answer first
43foundation · easy
Which of the following is a unique security risk introduced by AI systems that is not typically present in traditional software?
Select an answer first
44application · medium
A retail company is considering a third-party AI service for customer sentiment analysis. The vendor claims the service is compliant with GDPR and provides a model that was trained on public social media data. The company's legal team is concerned about data protection and auditability. Which due diligence step is most important before signing the contract?
Select an answer first
45foundation · easy
Which of the following is a key component of an AI audit?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.