Security Controls and Monitoring AAISM Practice Questions (Page 6)

Questions 26–29

1. 26expert · hard

   A security team is investigating a potential adversarial attack on an AI model used for medical diagnosis. The team has observed that the model's accuracy has dropped significantly on certain inputs. They need to determine if the attack is a poisoning attack or an evasion attack. What is the most effective way to distinguish between the two?

   • AExamine the training data for anomalies and test the model on clean, unmodified inputs.
   • BCheck the model's performance on a validation set from the original training period.
   • CMonitor the model's output distribution over time.
   • DRetrain the model with new data and see if performance improves.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   When applying a security control framework to an AI system, which step is essential to ensure the framework is effectively implemented?

   • AUsing the framework only as a documentation checklist
   • BImplementing all controls without modification to ensure compliance
   • CMapping the framework's controls to the specific AI system's lifecycle and risks
   • DSelecting the framework that is most popular in the industry
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the purpose of monitoring AI system behavior for anomalies?

   • ATo identify unexpected deviations in model outputs that may indicate a security issue
   • BTo ensure the model is using the latest hardware
   • CTo improve the model's accuracy on the training data
   • DTo reduce the cost of running the model
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is a key requirement for AI systems to meet regulatory compliance and audit requirements?

   • AUsing only open-source AI frameworks
   • BKeeping the AI model's algorithms secret from auditors
   • CMaintaining comprehensive documentation of the AI system's design, data, and decision-making processes
   • DEnsuring the AI system is hosted on-premises
   Reveal Solution Discussion Select an answer first