Risks of Shadow AI CT-GENAI Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which risk is most directly associated with Shadow AI in a testing organization?

   • AReduced need for manual testing
   • BImproved collaboration between testers and developers
   • CUnauthorized exposure of sensitive test data to external AI services
   • DIncreased cost of officially licensed testing tools
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In a testing organization, which scenario best exemplifies Shadow AI?

   • AThe QA team uses an AI-based test automation tool that was officially approved by the IT department and included in the company's software catalog.
   • BThe organization's security team deploys an AI-based vulnerability scanner across all test environments as part of a company-wide initiative.
   • CA test manager requests a new AI tool through the formal procurement process and waits for security review before using it.
   • DA test engineer uses a personal AI-powered test data generator without IT approval to create synthetic data for a project.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A multinational company is deploying a new AI-based test automation platform. To reduce Shadow AI, the CISO wants to enforce a strict 'approved tools only' policy. The VP of Engineering is concerned this will slow down innovation. What is the best approach to balance these concerns?

   • ADelegate all tool approval decisions to individual team leads.
   • BImplement the strict policy and require all new tools to go through a lengthy approval process.
   • CAllow all tools to be used but require a post-hoc security review.
   • DCreate a fast-track approval process for low-risk tools and a standard process for high-risk tools.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A test manager is reviewing tool usage in the QA department. She finds that a team has been using a free AI-based test case generator they found online. The tool is not on the company's approved software list. The generated test cases are of good quality and have been used in several releases. How should the manager classify this situation?

   • AIt is a security incident that requires immediate disciplinary action.
   • BIt is Shadow AI and should be brought under governance.
   • CIt is a productivity improvement and should be encouraged.
   • DIt is a minor issue that can be ignored since the test cases are good.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which strategy is most effective for mitigating the risks of Shadow AI in a testing organization?

   • AIgnoring Shadow AI because it is usually harmless
   • BEstablishing a governance framework that includes approved AI tool lists and usage policies
   • CAllowing testers to use any AI tool as long as they do not share sensitive data
   • DBanning all use of AI tools in testing activities
   Reveal Solution Discussion Select an answer first