Business Continuity and Incident Response AAISM Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An insurance company has developed an AI underwriting model. The company has a recovery strategy that includes model versioning and failover to a secondary site. To validate the effectiveness of this strategy, which exercise is MOST appropriate?

   • AA review of the recovery strategy documentation by the AI team.
   • BA survey of employees about their familiarity with the recovery plan.
   • CA tabletop exercise that discusses the recovery strategy without executing it.
   • DA simulation exercise that triggers a failover to the secondary site and tests model rollback procedures.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of a business impact analysis (BIA) for AI systems?

   • ATo write code for AI models
   • BTo assess the potential effects of AI system disruptions on business operations
   • CTo design the user interface of AI applications
   • DTo select the best machine learning algorithm
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following should be clearly defined in an AI incident response plan to ensure effective communication during an incident?

   • AThe brand of coffee to order during long incidents
   • BThe color scheme of the incident dashboard
   • CEscalation paths and communication protocols
   • DThe number of parking spaces in the office
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A logistics company uses an AI model to optimize delivery routes. The model is retrained weekly with new data. The company wants to ensure that if the current model version becomes corrupted, they can quickly revert to a known good version. Which recovery strategy is MOST appropriate?

   • AMaintain versioned model artifacts with metadata and rollback procedures.
   • BStore all training data in a single backup location without versioning.
   • CRely on the cloud provider's automatic failover to a different region.
   • DKeep only the latest model version in production to avoid confusion.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is the correct sequence of phases in the incident response lifecycle?

   • APreparation, Detection, Containment, Eradication, Recovery, Lessons Learned
   • BPreparation, Detection, Eradication, Containment, Recovery, Lessons Learned
   • CDetection, Preparation, Containment, Recovery, Eradication, Lessons Learned
   • DPreparation, Containment, Detection, Eradication, Recovery, Lessons Learned
   Reveal Solution Discussion Select an answer first