AI Security Program Development and Management AAISM Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   At which phase of the SDLC should AI security requirements be first considered?

   • ARequirements gathering and design
   • BMaintenance
   • CTesting
   • DDeployment
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A global bank is defining the scope of its AI security program. The bank has AI systems in multiple business units, including a high-risk algorithmic trading system and a low-risk internal chatbot. The bank operates in several countries with varying data protection regulations. The program sponsor wants to prioritize risks while ensuring compliance. What is the most appropriate way to define the scope?

   • AInclude only AI systems that are subject to specific regulations, such as those processing personal data.
   • BInclude all AI systems in the scope, but prioritize implementation based on a risk assessment that considers regulatory requirements and business impact.
   • CDefine the scope based on the AI systems' development stage, including only those in production.
   • DInclude only AI systems that are critical to business operations, regardless of regulatory requirements.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is a primary objective when defining the scope of an AI security program?

   • ATo ensure all AI-related security activities are aligned with the organization's risk appetite and business goals
   • BTo maximize the number of AI systems included in the program
   • CTo eliminate all security risks associated with AI systems
   • DTo comply with the minimum legal requirements for AI security
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a key component of an AI-specific incident response plan?

   • AA list of all employees' personal contact information
   • BProcedures for isolating and containing compromised AI models
   • CA policy for social media usage during an incident
   • DA schedule for regular model retraining
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary driver for continuously improving an AI security program?

   • AThe requirement to change security tools every year
   • BThe desire to increase the complexity of the security program
   • CEvolving threats, lessons learned from incidents, and changes in the AI landscape
   • DThe need to reduce the program's budget annually
   Reveal Solution Discussion Select an answer first