AI Risk Scenario Identification and Assessment (e.g., Threats, Vulnerabilities, and Attacks) AAIR Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which attack vector is primarily used to determine whether a specific data record was part of the model's training dataset?

   • AMembership inference attack
   • BData poisoning attack
   • CModel extraction attack
   • DEvasion attack
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An AI risk manager needs to document a risk scenario involving a data poisoning attack on a fraud detection model. The documentation will be used to communicate the risk to senior management and to support decision-making. Which of the following is the MOST important element to include in the documentation?

   • AThe potential impact on the organization's financial performance and reputation
   • BThe technical details of the attack vector
   • CThe names of the developers who built the model
   • DThe specific model architecture and training data
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which combination of factors is typically used to prioritize AI risk scenarios?

   • ACost and time
   • BThreat and vulnerability
   • CLikelihood and impact
   • DComplexity and accuracy
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A security team is estimating the likelihood of a data poisoning attack on a model that is retrained weekly using user-generated content. The model is used to recommend content on a social media platform. The team has observed a small number of coordinated accounts attempting to submit malicious content. Which factor MOST increases the likelihood of a successful data poisoning attack?

   • AThe small number of coordinated accounts observed
   • BThe frequent retraining cycle that incorporates user-generated content
   • CThe model's complex architecture
   • DThe model's high value to the organization
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A social media platform uses an AI content moderation system to identify hate speech. An attacker has found a way to craft posts that bypass the moderation system, leading to a flood of offensive content on the platform. Which of the following is the MOST significant impact of this risk scenario?

   • ALoss of user trust and potential regulatory fines
   • BDecreased accuracy of the moderation model
   • CLoss of training data confidentiality
   • DIncreased computational costs for the moderation system
   Reveal Solution Discussion Select an answer first