Risks of Shadow AI CT-GENAI Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which action is part of a mitigation strategy for Shadow AI?

   • ADelegating AI tool selection entirely to individual testers
   • BProviding awareness training to testers about the risks of using unapproved AI tools
   • CEncouraging testers to use personal AI tools to speed up their work
   • DRemoving all AI tools from the organization to avoid any risk
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A QA director is creating a program to mitigate Shadow AI risks. The program includes a new policy, a list of approved tools, and a training module. Which additional element is most critical for the long-term success of this program?

   • AA policy that is identical to the previous one but with more detailed definitions.
   • BA one-time communication campaign to announce the new policy.
   • CA process for regularly reviewing and updating the approved tool list.
   • DA strict enforcement mechanism that includes automated monitoring of all network traffic.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A QA team is using an approved AI tool for test case generation. The tool's vendor announces a new feature that automatically sends test data to the vendor's cloud for 'improvement'. The team lead wants to enable this feature to get better test cases. What should the team lead do first?

   • AEnable the feature since the tool is already approved.
   • BDisable the feature and continue using the tool as before.
   • CReview the feature's data-handling implications and seek approval from the appropriate governance body.
   • DAsk the vendor for a discount in exchange for enabling the feature.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which activity is an example of Shadow AI in a testing context?

   • AA tester uses a free online AI chatbot to summarize bug reports and generate test summaries, without informing the organization.
   • BA tester attends a training session on AI-based testing tools provided by the organization's learning and development team.
   • CA tester manually writes test cases and uses a spreadsheet to track results, without using any AI tools.
   • DA tester uses an AI-powered test management tool that was purchased by the organization and integrated into the CI/CD pipeline.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A large enterprise has a policy that prohibits the use of external AI tools for any work-related task. Despite this, a survey reveals that 30% of testers use a personal AI assistant to help write test reports. The reports contain no sensitive data, and the testers find the tool very helpful. The CTO wants to eliminate this Shadow AI. What is the most effective strategy?

   • AReview the policy, understand the testers' needs, and consider providing an approved, secure alternative.
   • BStrengthen the policy and increase the severity of penalties for non-compliance.
   • CDeploy a technical solution that blocks access to the AI assistant's website.
   • DConduct a one-time awareness training session on the dangers of Shadow AI.
   Reveal Solution Discussion Select an answer first