AI Security Program Development and Management AAISM Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A financial services firm is rolling out an AI system that automates loan approvals. The firm's employees, including loan officers and IT staff, have varying levels of technical expertise. The compliance team wants to ensure that all employees understand the security implications of the AI system. What is the most effective training approach?

   • ADevelop role-based training that covers AI security fundamentals for all employees and advanced topics for technical staff.
   • BProvide training only to employees who directly use the AI system, as others are not affected.
   • CProvide a single, comprehensive training module on AI security for all employees.
   • DTrain only the IT security team, as they are responsible for AI security.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When defining the scope of an AI security program, which activity is most directly associated with establishing its boundaries?

   • AConducting a vulnerability assessment of all AI models
   • BIdentifying the AI systems, data assets, and processes that fall under the program's purview
   • CSelecting the specific security tools and technologies to be deployed
   • DAssigning security roles and responsibilities to personnel
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary focus of AI supply chain security?

   • AReducing the cost of AI development
   • BEncrypting all data used in AI training
   • CAssessing and mitigating risks from third-party AI components, data, and services
   • DEnsuring that all AI models are developed in-house
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is an example of an AI supply chain risk?

   • AA pre-trained model from a third-party vendor contains hidden backdoors
   • BThe AI system experiences downtime due to a power outage
   • CAn internal developer accidentally deletes a training dataset
   • DThe AI model produces biased outputs due to skewed training data
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   When aligning AI security program activities with established governance frameworks, which of the following is the primary purpose?

   • ATo ensure consistency with existing organizational risk management practices and terminology
   • BTo create a separate, standalone AI security framework
   • CTo replace the organization's existing security policies with AI-specific ones
   • DTo satisfy external auditors without changing internal processes
   Reveal Solution Discussion Select an answer first