Incident Response Management Specific to AI AAIA Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of a post-incident review (post-mortem) in AI incident response?

   • ATo identify root causes and improve incident response processes
   • BTo immediately restore the AI system to production
   • CTo assign blame to individuals
   • DTo delete all evidence of the incident
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is a benefit of integrating AI incident response with the organization's security operations center (SOC)?

   • AGuaranteeing that all AI incidents are prevented
   • BReducing the need for AI model documentation
   • CEliminating the need for AI-specific incident response procedures
   • DLeveraging existing monitoring and alerting infrastructure
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A security operations center (SOC) monitors an AI-based intrusion detection system (IDS). The IDS has started generating a high number of false positives, overwhelming the SOC analysts. The SOC suspects the IDS model may have been compromised, but the model's decision-making is opaque. The SOC needs to determine whether this is an attack or a model degradation issue. Which approach is MOST effective?

   • AAnalyze the input data and model outputs for patterns consistent with adversarial perturbation.
   • BIgnore the false positives and wait for the model to self-correct.
   • CRetrain the IDS model with new data to improve its accuracy.
   • DImmediately shut down the IDS to prevent further false positives.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is an output of a post-incident review?

   • AA list of employees to terminate
   • BUpdated risk assessments
   • CA new model architecture
   • DA guarantee that the incident will never recur
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Why is it important to integrate AI incident response with existing IT and security operations?

   • ATo ensure coordination and consistency in incident handling
   • BTo reduce the need for AI-specific training
   • CTo eliminate the need for a separate incident response plan
   • DTo make the AI system run faster
   Reveal Solution Discussion Select an answer first