AI Security Program Development and Management AAISM Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A logistics company is integrating a third-party AI model into its route optimization system. The model was developed externally and the company has limited visibility into its training data. The company wants to ensure that the integration does not introduce security vulnerabilities. What is the most appropriate action during the SDLC?

   • APerform a security review of the model, including testing for adversarial robustness and data poisoning, before integration.
   • BIntegrate the model as-is, since the vendor is reputable.
   • COnly test the model's performance on the company's data, not its security.
   • DRequire the vendor to provide the training data for the company to review.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A healthcare organization is deploying an AI system that assists clinicians with diagnostic recommendations. The organization has a flat IT structure, and the AI project team is unsure who is accountable for the security of the model and its outputs. The compliance officer wants to ensure that roles are clearly defined and that the AI security program is integrated with existing governance. What is the most effective way to establish AI security roles and responsibilities?

   • ACreate a dedicated AI security officer role with authority to enforce policies across all AI initiatives.
   • BAssign the AI security responsibility to the data science team, as they build and maintain the models.
   • CRely on the existing IT security team to handle AI security as part of their current duties.
   • DLet the AI vendor manage security, as they are responsible for the model's performance.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is an example of a clearly defined role in an AI security program?

   • AThe IT department is solely responsible for all AI security
   • BThe Chief AI Security Officer is responsible for overseeing the overall AI security strategy and governance
   • CAll employees are responsible for AI security equally
   • DExternal consultants are responsible for all AI security decisions
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is an example of applying lessons learned to improve an AI security program?

   • AKeeping the same procedures to avoid introducing errors
   • BDeleting incident logs to save storage space
   • CIncreasing the frequency of security audits without changing practices
   • DUpdating incident response procedures based on a post-incident review
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A telecommunications company has implemented an AI security program and wants to report its effectiveness to the board of directors. The board is interested in understanding the program's impact on business risk. Which reporting approach would be most effective?

   • AReport on the number of AI models in production and their performance metrics.
   • BReport on key risk indicators, such as the number of AI-related security incidents and the percentage of AI systems with security controls.
   • CReport on the total cost of the AI security program and compare it to the IT budget.
   • DReport the number of AI security policies created and the number of training sessions held.
   Reveal Solution Discussion Select an answer first