2.3 Identify and Explain the Classification and Attributes of AI Applications and Apply Security Controls NETWORK-SECURITY-ARCHITECT Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the purpose of monitoring a sanctioned AI application?

   • ATo detect and respond to security incidents or policy violations
   • BTo automatically upgrade the application to the latest version
   • CTo reduce the application's resource consumption
   • DTo ensure the application is accessible to all employees
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the purpose of the 'Measure' function in the NIST AI Risk Management Framework?

   • ATo establish governance structures and policies for AI
   • BTo implement risk treatment plans and monitor their effectiveness
   • CTo assess and analyze AI risks using quantitative and qualitative methods
   • DTo identify the context and potential risks of AI systems
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   An AI application processes personal data of EU residents and is used for automated decision-making. Which security control is most directly required by GDPR?

   • AEnsuring all data is encrypted with AES-256
   • BImplementing a data protection impact assessment (DPIA)
   • CConducting a PCI DSS assessment
   • DDeploying a web application firewall
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A manufacturer uses an AI system to optimize production lines. The system generates data about machine performance and product quality. Under the EU Data Act, the manufacturer must make this data available to the business customer that purchased the machines. What is the PRIMARY obligation the manufacturer must fulfill?

   • ATransfer the data to a third-party data processing service designated by the customer.
   • BAnonymize all data before sharing it with the customer to protect trade secrets.
   • CProvide the customer with access to the data generated by the AI system, free of charge and in a machine-readable format.
   • DObtain explicit consent from the customer before sharing any data generated by the AI system.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A global HR company deploys an AI resume-screening tool that processes applicant data from EU residents and US residents. The EU applicants' data is processed in a US data center. The company has a legitimate interest basis for processing. To comply with GDPR for the EU applicants, what is the MOST appropriate control?

   • AImplement standard contractual clauses (SCCs) for the transfer of EU applicant data to the US.
   • BStore EU applicant data in an EU data center and process it there exclusively.
   • CObtain explicit consent from each EU applicant before processing their data.
   • DAnonymize all EU applicant data before transferring it to the US data center.
   Reveal Solution Discussion Select an answer first