An e-commerce company has developed an AI-based recommendation engine that is critical for sales. The company has a business continuity plan (BCP) and an incident response plan (IRP) for the AI system. Management wants to validate that these plans work effectively without causing a real disruption. Which approach is MOST appropriate?

Review the plans' documentation for completeness without any simulation.

Conduct a tabletop exercise with key stakeholders to walk through a simulated model failure scenario.

Perform a full failover to the backup environment during peak shopping hours.

Wait for a real incident to occur to see if the plans work.

In the incident response lifecycle, what is the primary goal of the containment phase?

To identify the root cause of the incident

To limit the scope and impact of the incident

To restore systems to normal operation

To collect evidence for legal proceedings

Which of the following is a recovery strategy specifically important for AI systems?

Employee training on office safety

What is the primary purpose of business continuity management (BCM) in an organization?

To eliminate all risks to business operations through preventive controls

To ensure that critical business functions can continue or be restored within agreed timeframes during a disruption

To transfer all operational risks to third-party vendors

To document IT system configurations for audit purposes

ISACAAdvanced in AI Security Management

Domain 1Objective 5

Business Continuity and Incident Response AAISM Practice Questions (Page 6)

Part of the AI Governance and Program Management domain, which accounts for 31% of the AAISM exam.

32questions here

7free pages

8concepts

31%of the exam

Questions 26–30

26foundation · easy
Which of the following is an example of an AI-specific incident caused by changes in the input data distribution?
Select an answer first
27application · medium
An e-commerce company has developed an AI-based recommendation engine that is critical for sales. The company has a business continuity plan (BCP) and an incident response plan (IRP) for the AI system. Management wants to validate that these plans work effectively without causing a real disruption. Which approach is MOST appropriate?
Select an answer first
28foundation · easy
In the incident response lifecycle, what is the primary goal of the containment phase?
Select an answer first
29foundation · easy
Which of the following is a recovery strategy specifically important for AI systems?
Select an answer first
30foundation · easy
What is the primary purpose of business continuity management (BCM) in an organization?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AAISM

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “AAISM” is a trademark of its owner, used for identification only.

Business Continuity and Incident Response AAISM Practice Questions (Page 6)

Questions 26–30

Which of the following is an example of an AI-specific incident caused by changes in the input data distribution?

In the incident response lifecycle, what is the primary goal of the containment phase?

Which of the following is a recovery strategy specifically important for AI systems?

What is the primary purpose of business continuity management (BCM) in an organization?

Keep studying — AI Governance and Program Management