AI Security Program Development and Management AAISM Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A software company is developing a new AI-powered feature that will be integrated into its existing product. The development team is following an agile methodology with two-week sprints. The security team wants to ensure that AI-specific security controls are incorporated without slowing down development. Which approach best integrates AI security into the SDLC?

   • ARequire the development team to follow a separate, parallel security process managed by the security team.
   • BEmbed security checkpoints into each sprint, including threat modeling, secure coding practices, and AI-specific testing.
   • CPerform a comprehensive security review only at the end of the development process before release.
   • DDefer security activities until after the feature is released, based on user feedback.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A multinational bank is establishing an AI security program. The bank's AI initiatives include customer-facing chatbots, internal document summarization, and a fraud-detection model that processes personal data across multiple jurisdictions. The program sponsor wants the scope to be defined so that the most critical risks are addressed first, while remaining aligned with the organization's existing enterprise risk management framework. Which approach best defines the initial scope of the AI security program?

   • ALimit the program to customer-facing AI systems, as internal tools pose minimal security risk.
   • BInclude all AI systems in scope, applying the same security controls to each system regardless of risk level.
   • CDefine the scope based on the AI vendor's recommendations, as they are best positioned to assess security needs.
   • DScope the program to AI systems that process personal data or support critical business functions, and align control selection with the enterprise risk framework.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the primary purpose of implementing AI security monitoring?

   • ATo collect data for improving AI model accuracy
   • BTo detect and respond to security incidents affecting AI systems in a timely manner
   • CTo automatically fix all security vulnerabilities without human intervention
   • DTo ensure that AI systems are always available to users
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary goal of AI security awareness and training programs?

   • ATo enhance stakeholders' understanding of AI security risks and their roles in mitigating them
   • BTo ensure that only security personnel understand AI risks
   • CTo certify all employees as AI security experts
   • DTo replace technical security controls with human vigilance
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is the primary goal of integrating AI security into the SDLC?

   • ATo assign a single developer to handle all security aspects
   • BTo identify and mitigate security risks early in the development process
   • CTo ensure that all AI models are developed using the same programming language
   • DTo speed up the development process by removing security checkpoints
   Reveal Solution Discussion Select an answer first