2.3 Identify and Explain the Classification and Attributes of AI Applications and Apply Security Controls NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A law firm wants to use an AI legal research tool. The firm's IT department has evaluated the tool and determined it meets the firm's security requirements. The tool will be added to the firm's approved application list. What is the MOST IMPORTANT control to implement as part of the sanctioning process?

   • AConduct a penetration test of the AI tool's vendor infrastructure.
   • BConfigure the tool to integrate with the firm's single sign-on (SSO) system.
   • CDefine a usage policy that specifies what types of client data can be submitted to the tool.
   • DDeploy a DLP agent on all endpoints that will access the tool.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A smart-home device manufacturer sells IoT devices to EU consumers. The devices generate usage data that is processed by an AI assistant in the manufacturer's cloud. An EU consumer requests that their data be transferred to a competing smart-home platform. Under the EU Data Act, what is the manufacturer's PRIMARY obligation?

   • ARequire the consumer to obtain consent from the competing platform before the transfer.
   • BTransfer the data to the competing platform in a structured, machine-readable format, free of charge.
   • CCharge a reasonable fee for the data transfer to cover the manufacturer's costs.
   • DAnonymize the data before transferring it to protect the consumer's privacy.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is an example of a security control applied to a sanctioned AI application?

   • ARemoving the application from the network to prevent attacks
   • BDisabling the application's logging to reduce storage costs
   • CImplementing role-based access control to limit who can use the application
   • DAllowing all users to access the application without authentication
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which GDPR principle requires that personal data be processed lawfully, fairly, and transparently?

   • ALawfulness, fairness, and transparency
   • BStorage limitation
   • CAccuracy
   • DData minimization
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary purpose of application sanctioning for AI applications?

   • ATo monitor user activity within AI applications for suspicious behavior
   • BTo determine whether an AI application is approved for use in an organization and assign appropriate security controls
   • CTo automatically update AI applications with the latest security patches
   • DTo block all AI applications by default and require explicit approval for each one
   Reveal Solution Discussion Select an answer first