A multinational company is developing an AI system that processes employee HR records, including salary and performance reviews. The data team is deciding how to classify this data to apply appropriate controls. Which classification is most appropriate for this data?

Internal data, with no special controls needed.

Confidential data, requiring strict access controls and encryption.

Public data, since it is internal to the company.

Regulated data, but only if the company is in a regulated industry.

A marketing company is building a customer segmentation model using personal data. To comply with privacy regulations, they want to minimize the risk of re-identification. Which technique is most effective for this purpose?

Restrict access to the data to only the data science team.

Encrypt the data at rest and in transit.

Anonymize the data using a robust technique such as k-anonymity or differential privacy.

Apply data minimization by collecting only the data necessary for the model.

Which of the following is a common source of bias in AI training data?

Underrepresentation of certain groups in the dataset

Using a large dataset with many features

What is the primary purpose of data compliance requirements in AI systems?

To ensure data management practices align with legal and regulatory obligations

To increase data collection volume

ISACAAdvanced in AI Risk

Domain 2Objective 4

AI Data and Asset Management AAIR Practice Questions (Page 4)

Part of the AI Life Cycle Risk Management domain, which accounts for 21% of the AAIR exam.

41questions here

9free pages

13concepts

21%of the exam

Questions 16–20

16application · medium
A multinational company is developing an AI system that processes employee HR records, including salary and performance reviews. The data team is deciding how to classify this data to apply appropriate controls. Which classification is most appropriate for this data?
Select an answer first
17application · medium
A marketing company is building a customer segmentation model using personal data. To comply with privacy regulations, they want to minimize the risk of re-identification. Which technique is most effective for this purpose?
Select an answer first
18foundation · easy
Which of the following is a common source of bias in AI training data?
Select an answer first
19foundation · easy
Which stage of the AI data life cycle involves removing or destroying data that is no longer needed, in accordance with retention policies?
Select an answer first
20foundation · easy
What is the primary purpose of data compliance requirements in AI systems?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AAIR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “AAIR” is a trademark of its owner, used for identification only.