ISACAAdvanced in AI Risk
Domain 3Objective 1
AI Risk Scenario Identification and Assessment (e.g., Threats, Vulnerabilities, and Attacks) AAIR Practice Questions (Page 2)
Part of the AI Risk Program Management domain, which accounts for 42% of the AAIR exam.
28questions here
6free pages
8concepts
42%of the exam
Questions 6–10
- 6
Which of the following is an example of a vulnerability in an AI system's data pipeline?
Select an answer first - 7
A company uses an AI system to automate hiring decisions. The system is found to be biased against a certain demographic group, leading to discriminatory hiring practices. The company faces potential legal action and reputational damage. Which of the following is the MOST significant impact of this risk scenario?
Select an answer first - 8
What is the primary purpose of prioritizing AI risk scenarios?
Select an answer first - 9
A security analyst is reviewing logs and notices that an external party is making a large number of API calls to a machine learning model that classifies loan applications. The calls are systematically varied and appear to be probing the model's decision boundaries. Which threat is the analyst MOST likely observing?
Select an answer first - 10
Which type of threat to an AI system involves an attacker inserting malicious data into the training dataset to cause the model to learn incorrect patterns?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “AAIR” is a trademark of its owner, used for identification only.