AI Security Program Development and Management AAISM Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A technology startup is developing an AI-based personal assistant app. The startup has a small team and limited resources. The founders want to create AI security policies that are practical and aligned with their business goals. What is the most appropriate approach to developing these policies?

   • ADevelop a concise policy that addresses key AI security risks, such as data privacy, model integrity, and user safety, and assign responsibility for enforcement.
   • BRely on the app store's security guidelines as a substitute for internal policies.
   • CAdopt a comprehensive AI security policy template from a large enterprise to ensure completeness.
   • DDefer creating policies until the app is fully developed and ready for launch.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A media company uses AI to generate personalized content recommendations. The company relies on a cloud-based AI service and a third-party data enrichment provider. The security team wants to ensure that the supply chain is secure and that the program's effectiveness is measurable. What is the most appropriate action?

   • ASwitch to a single vendor to reduce the number of third parties.
   • BOnly assess the security of the data provider, as the cloud service is already secure.
   • CRely on the cloud provider's security certifications without further review.
   • DConduct regular security assessments of the cloud service and data provider, and track the number of supply chain incidents.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A manufacturing company is adopting AI for predictive maintenance and quality control. The company already has a mature ISO 27001-based information security management system (ISMS). The AI security program manager wants to ensure that AI security activities are aligned with the existing governance framework. What is the most effective way to achieve this alignment?

   • ACreate a separate AI security framework that operates independently of the ISMS.
   • BAdopt a generic AI security framework from a vendor without considering the ISMS.
   • CWait for the ISMS to be updated to include AI security before implementing any AI-specific controls.
   • DMap AI security controls to the existing ISMS controls and integrate them into the ISMS risk management process.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the primary purpose of measuring AI security program effectiveness?

   • ATo justify the program's budget to senior management
   • BTo compare the organization's security posture with competitors
   • CTo ensure that all AI systems are free of vulnerabilities
   • DTo evaluate whether the program is achieving its security objectives and identify areas for improvement
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A retail company is building an AI recommendation system using a pre-trained model from a third-party vendor and a dataset purchased from a data broker. The company's security team is concerned about the provenance and integrity of these components. What is the most appropriate action to manage AI supply chain security?

   • AAvoid using third-party components altogether and build all AI models in-house.
   • BRely on the vendor's claims of security and compliance without further verification.
   • CConduct a security assessment of the vendor and data broker, including reviewing their security practices and data handling procedures.
   • DOnly assess the security of the model, not the data, since data is less critical.
   Reveal Solution Discussion Select an answer first