Risks of Shadow AI CT-GENAI Practice Questions (Page 4)

Questions 16–18

1. 16application · medium

   A company is developing a policy to address Shadow AI. The policy should be effective and practical. Which statement best reflects a key principle of an effective Shadow AI policy?

   • AThe policy should be technical, focusing on network monitoring and blocking tools.
   • BThe policy should be created by the IT department and focus on security risks only.
   • CThe policy should provide clear guidelines, approved alternatives, and a process for requesting new tools.
   • DThe policy should focus on strict prohibition and heavy penalties to deter usage.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a key risk of Shadow AI in testing?

   • AAutomatic compliance with all data protection regulations
   • BElimination of the need for test environment management
   • CGuaranteed improvement in test coverage
   • DInconsistent test quality due to unvalidated AI-generated test cases
   Reveal Solution Discussion Select an answer first
3. 18expert · hard

   A company has a mature AI governance program. The program includes a policy, an approved tool list, and training. However, a recent audit found that a team is using an AI tool that was approved for a different team. The tool is on the approved list, but the team using it did not go through the required training. What is the most appropriate action?

   • ARequire the team to complete the required training before continuing to use the tool.
   • BIssue a formal warning to the team lead for allowing the team to use the tool without training.
   • CAllow the team to continue using the tool since it is on the approved list.
   • DRemove the tool from the approved list to prevent future misuse.
   Reveal Solution Discussion Select an answer first