AI Security Program Development and Management AAISM Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a key characteristic of effective AI security policies?

   • AThey are aligned with the organization's overall security policies and business objectives
   • BThey are designed to be as restrictive as possible to minimize risk
   • CThey are static and rarely updated to remain stable
   • DThey are written in highly technical language to be precise
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An insurance company has deployed an AI system that assesses claims for fraud. The system has been in production for six months. The security team wants to implement monitoring and incident response procedures that are tailored to AI systems and can adapt to new threats. What is the most appropriate approach?

   • AImplement continuous monitoring of model inputs and outputs, and establish an incident response team with AI-specific expertise.
   • BSet up monitoring only for system performance, such as response time and uptime.
   • CWait for an incident to occur before developing an incident response plan.
   • DCreate an incident response plan that is identical to the one used for traditional IT systems.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of defining clear roles and responsibilities for AI security within an organization?

   • ATo create a hierarchical structure that centralizes all AI security decisions
   • BTo ensure accountability and ownership for AI security tasks and decisions
   • CTo comply with external regulations that mandate specific job titles
   • DTo reduce the number of personnel involved in AI security
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A government agency has implemented an AI security program and wants to measure its effectiveness. The agency's leadership expects regular reports that demonstrate the program's value and identify areas for improvement. Which set of metrics would be most appropriate for measuring and reporting the program's effectiveness?

   • ANumber of training sessions conducted and employee satisfaction scores.
   • BNumber of AI models deployed and the total cost of the program.
   • CPercentage of AI systems covered by security controls, number of security incidents detected, and time to remediate incidents.
   • DNumber of security policies created and the frequency of policy reviews.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A university is implementing an AI security program for its research and administrative AI systems. The university has a decentralized structure with various departments managing their own IT. The program manager wants to ensure that AI security roles are clearly defined and that there is accountability across the organization. What is the most effective approach?

   • AAppoint a central AI security committee with representatives from each department to oversee AI security.
   • BAllow each department to manage its own AI security without central oversight.
   • CCreate a policy that assigns responsibility to the AI project leads, but do not enforce it.
   • DAssign AI security responsibility to the IT department only.
   Reveal Solution Discussion Select an answer first