AI Data and Asset Management AAIR Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the primary purpose of a data security risk assessment?

   • ATo identify and evaluate risks to data confidentiality, integrity, and availability
   • BTo improve the accuracy of AI models
   • CTo ensure data is anonymized
   • DTo reduce the cost of data storage
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company's AI system uses a database that was recently breached, exposing customer data. The risk team is conducting a post-incident review. Which action is most important to prevent future breaches?

   • ADelete the breached data and start over.
   • BImplement stronger access controls and encryption for the database.
   • CIncrease the frequency of data backups.
   • DMonitor the database for unusual activity after the breach.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the primary purpose of classifying data by sensitivity and criticality in an AI initiative?

   • ATo reduce the volume of data stored in the system
   • BTo identify which data should be used for training versus testing
   • CTo determine the appropriate security and privacy controls for the data
   • DTo improve the accuracy of AI model predictions
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A European company is developing an AI system that processes personal data of EU citizens. The data is stored on servers in the US. The company's legal team is concerned about GDPR compliance. What is the most important consideration?

   • AThe company must anonymize all personal data before storing it in the US.
   • BThe company must ensure that data transfers to the US have appropriate safeguards, such as standard contractual clauses.
   • CThe data must be stored in the EU to comply with GDPR.
   • DThe company must obtain consent from every data subject before transferring data.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A government agency is launching an AI initiative to analyze citizen feedback. The agency has multiple departments that contribute data. To ensure accountability and compliance, they need to establish clear roles and responsibilities for data management. Which approach best establishes a data governance framework?

   • AOutsource data governance to a third-party vendor.
   • BLet each department manage its data independently without central oversight.
   • CCreate a data governance committee and assign data owners and stewards for each data domain.
   • DAssign a single data owner for all data across departments.
   Reveal Solution Discussion Select an answer first