Business Continuity and Incident Response AAISM Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A cybersecurity team detects that an attacker has been sending adversarial inputs to a fraud detection AI model, causing it to misclassify fraudulent transactions. The team has identified the attack vector and isolated the affected model endpoint. What should the team do NEXT in the incident response lifecycle?

   • AEradicate the adversarial inputs from the system and patch the vulnerability that allowed the attack.
   • BNotify the public about the incident.
   • CConduct a lessons-learned review to improve future detection.
   • DRecover the model by restoring it from a backup.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A healthcare organization is developing an incident response plan for its AI diagnostic support system. The plan must define roles and escalation paths. Which role should be responsible for deciding whether to shut down the AI system during a critical incident?

   • AThe data scientist who developed the model.
   • BThe public relations officer, who manages external communications.
   • CThe incident commander, who has authority to make operational decisions during the incident.
   • DThe legal counsel, who ensures compliance with regulations.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A technology company is developing an incident response plan for its AI systems. The plan must include communication protocols for internal and external stakeholders. Which element is MOST important to define in the communication protocols?

   • AThe company's marketing strategy.
   • BPredefined templates for incident notifications to different stakeholder groups.
   • CThe model's training data sources.
   • DThe personal email addresses of all employees.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A healthcare provider uses an AI diagnostic system that is critical for patient care. The system has a recovery time objective (RTO) of 1 hour and a recovery point objective (RPO) of 5 minutes. The provider is considering a recovery strategy that uses hourly snapshots of the model and data. Which assessment is MOST accurate?

   • AThe strategy does not meet the RPO because hourly snapshots could lose up to 60 minutes of data.
   • BThe strategy meets the RTO because snapshots can be restored quickly.
   • CThe strategy meets both the RTO and the RPO.
   • DThe strategy meets the RPO because snapshots are taken regularly.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is a critical component of an AI incident response plan that addresses the unique nature of AI systems?

   • AA list of all employee birthdays
   • BA policy for social media usage
   • CA process for rolling back to a previous model version
   • DA schedule for routine hardware maintenance
   Reveal Solution Discussion Select an answer first