Incident Response Management Specific to AI AAIA Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a type of evidence that should be preserved during an AI incident?

   • AThe team's lunch orders
   • BThe model's version history
   • CModel input and output logs
   • DThe company's marketing materials
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A large enterprise has an existing cybersecurity incident response framework based on NIST. The AI operations team has detected a potential model poisoning attack. To ensure an effective response, what should the team do?

   • AWait for the cybersecurity team to handle the incident without AI-specific input.
   • BReport the incident only to the data science team.
   • CIntegrate the AI incident response into the existing cybersecurity framework, using its phases and communication channels.
   • DCreate a separate, isolated incident response process for AI incidents.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A financial services firm's AI-powered loan approval system has been denying loans to a protected class of applicants due to a data bias issue. The incident has been confirmed and the firm is required to notify regulators within 72 hours. The incident response team is developing the communication plan. What is the MOST important consideration?

   • ACommunicate the incident to the public before informing the regulator.
   • BNotify the regulatory authority within the required timeframe with accurate details of the incident.
   • CDelay notification until the root cause is fully understood.
   • DNotify only internal stakeholders to avoid external scrutiny.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   After a ransomware attack that encrypted a company's data, the AI incident response team discovered that the attack also corrupted the training data for a customer churn model. The team has restored the data from backups. What is the MOST appropriate eradication step?

   • ADocument the incident and close the case without retraining.
   • BRetrain the model immediately using the restored data.
   • CValidate the integrity of the restored data before retraining the model.
   • DDiscard the model and build a new one from scratch.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   During an AI incident, the response team needs to preserve evidence for a potential lawsuit. The team has identified that the model's training data was poisoned. However, the team also needs to retrain the model quickly to restore service. What is the BEST way to balance evidence preservation and recovery?

   • AWait for the legal team to decide before taking any action.
   • BDelete the poisoned training data to prevent further harm.
   • CCreate a forensic copy of the model and training data before any retraining or deletion.
   • DRetrain the model first and then try to reconstruct the evidence from memory.
   Reveal Solution Discussion Select an answer first