Incident Response Management Specific to AI AAIA Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   During which phase of the AI incident response lifecycle does an organization update its incident response plan based on findings?

   • ARecovery
   • BDetection
   • CPreparation
   • DLessons learned
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A global company's AI system that handles employee personal data has been breached. The incident response team is developing the communication plan. The company operates in multiple jurisdictions with different breach notification laws. What is the MOST appropriate approach?

   • AUse a single, uniform notification for all jurisdictions to simplify the process.
   • BDelay notifications until legal counsel provides a complete analysis.
   • CNotify only the jurisdiction where the company is headquartered.
   • DIdentify all applicable jurisdictions and tailor notifications to meet each jurisdiction's legal requirements.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which of the following is an AI-specific regulation that may impact incident response?

   • AThe Payment Card Industry Data Security Standard (PCI DSS)
   • BThe Sarbanes-Oxley Act
   • CThe EU AI Act
   • DThe Health Insurance Portability and Accountability Act (HIPAA)
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which of the following is a key reason for documenting AI incidents thoroughly?

   • ATo speed up the model's inference time
   • BTo reduce the number of GPUs needed for training
   • CTo increase the model's accuracy
   • DTo preserve evidence for forensic analysis and regulatory review
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A bank's fraud-detection model begins rejecting a high volume of legitimate credit-card transactions. The model's precision has dropped sharply, but the bank's IT help desk has no visibility into model behavior. The incident response team is unsure whether this is a model degradation, a data pipeline issue, or an adversarial attack. According to AI incident classification principles, what should the team do FIRST?

   • AImmediately roll back the model to the previous version without further investigation.
   • BClassify the event as a high-severity AI incident and initiate the full incident response lifecycle.
   • CTreat it as a routine IT incident and route it to the service desk for ticket resolution.
   • DWait for more data to confirm the trend before declaring an incident.
   Reveal Solution Discussion Select an answer first