AI Incident Response, BIA, Business Continuity, and Disaster Recovery AAIR Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A global bank is conducting a BIA for its AI-based anti-money laundering (AML) system. The system is critical for regulatory compliance and has a high dependency on a third-party data provider. The bank's risk appetite allows for a maximum downtime of 2 hours for this system. However, the third-party provider's SLA only guarantees 99.5% availability, which could result in up to 4 hours of downtime per month. What is the MOST appropriate action for the bank?

   • ADevelop a mitigation plan that includes alternative data sources or manual processes to cover the gap.
   • BIncrease the bank's risk appetite to accept up to 4 hours of downtime.
   • CNegotiate a higher SLA with the third-party provider.
   • DAccept the risk because the third-party provider's SLA is within the bank's risk appetite.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   How should AI incident response and continuity plans be integrated with the organization's overall risk management framework?

   • AThey should only be created after an incident occurs
   • BThey should be kept separate to avoid complexity
   • CThey should be managed exclusively by the IT department
   • DThey should be aligned with the organization's risk appetite and resilience objectives
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A logistics company uses an AI system to optimize delivery routes. The system depends on a real-time traffic data feed from a third-party provider. The company is conducting a BIA and has identified that the AI system is critical for meeting delivery SLAs. The third-party provider has a history of occasional outages. What is the MOST effective way to reduce the dependency risk?

   • AMoving the AI system to a different cloud provider.
   • BImplementing a fallback mechanism that uses historical traffic data when the real-time feed is unavailable.
   • CIncreasing the frequency of model retraining.
   • DNegotiating a higher SLA with the third-party provider.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   During which phase of the AI incident response lifecycle does the team formally review what happened, identify root causes, and update response procedures to improve future handling?

   • ALessons learned
   • BDetection
   • CRecovery
   • DEradication
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   In a Business Impact Analysis for an AI system, which of the following would be considered a financial impact?

   • ALoss of customer trust
   • BDecreased employee morale
   • CDamage to brand image
   • DRegulatory fines
   Reveal Solution Discussion Select an answer first