Free ISACA AAIA Practice Test & Real Exam Questions, Page 4

Question #43

Which of the following is the BEST way to support the development and design of high-risk AI systems?

A. Conduct regular training sessions for users on data privacy.

B. Ensure the availability of trustworthy data sets.

C. Implement multi-factor authentication (MFA) for all users accessing the AI system.

D. Regularly back up the AI system's data to a secure, offsite location.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #44

An organization is evaluating change management practices for AI-based decision support models. Which of the following BEST demonstrates effective AI-focused change management?

A. Deploying two separate copies of the model after each adjustment to compare results

B. Documenting model updates and retraining sessions to ensure traceability

C. Assigning a single data science team member to adjust the model in order to establish accountability

D. Engaging an independent expert to review the model's accuracy and precision on a quarterly basis

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #45

An IS auditor is reviewing a dataset related to a restaurant's food delivery process. Which of the following data preparation techniques should be used to ensure that no single feature dominates and all fields are weighted appropriately?

A. Converting Postal Code values from text format to integers

B. Inserting average values where Distance data is missing

C. Removing duplicate entries for Customer Address field

D. Scaling the Distance From Restaurant field

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #46

Which of the following is the GREATEST benefit of using large language models (LLMs) to identify potential control deficiencies?

A. Allowing the auditor to replace walkthroughs with automated testing

B. Simulating financial transactions for internal control testing

C. Independently verifying audit options based on control assessments

D. Summarizing multiple process narratives for inconsistencies

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #47

Which of the following is the MOST important course of action for an organization prior to allowing end users to utilize an AI tool?

A. Implement baseline performance metrics.

B. Determine the impact to the disaster recovery plan (DRP).

C. Develop an AI policy with guidelines on appropriate use.

D. Ensure a cybersecurity insurance clause is in place to include the use of AI.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #48

Which of the following BEST describes "human-in-the-loop" as an AI control?

A. A human trains new employees on the AI system

B. A human periodically audits the training data

C. A human reviews and can override AI-generated decisions before they take effect

D. A human writes the model's code

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #49

Which control BEST mitigates the risk of a machine learning model being manipulated through adversarial input perturbations?

A. Role-based access control on the training pipeline

B. Data encryption at rest

C. Adversarial robustness testing during model validation

D. Regular password rotation

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #50

Which of the following is the PRIMARY purpose of an AI acceptable use policy?

A. Outlining AI usage monitoring procedures

B. Educating employees on where to find and how to use AI tools

C. Explaining the distinction between different types of AI

D. Establishing guidance on the ethical use of AI

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #51

An IS auditor uses an AI model to summarize worksheets, but several worksheets contained a
"Hidden Cell" instructing the model to ignore control failures. Which solution BEST mitigates the risk?

A. Convert files to PDF before uploading to the AI model.

B. Ensure read-only mode with track changes is enabled.

C. Allow extraction only to predefined values and headers in the worksheets.

D. Instruct the model to ignore instructions in data and set high temperature.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #52

Which of the following should be done FIRST when an attacker exfiltrates sensitive information from an AI model?

A. Inform regulators and affected stakeholders of a potential data breach.

B. Isolate impacted systems until the attack vector is identified.

C. Implement rate limiting and query restrictions to reduce exploitation attempts.

D. Rebuild the AI model using a more secure architecture.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #53

Which of the following techniques BEST assesses an AI model's ability to generalize to new data?

A. Metamorphic testing

B. Model component unit testing

C. Failure mode effects analysis

D. K-fold cross validation

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #54

Which of the following controls helps mitigate the risk of competitors poisoning data utilized by a machine learning (ML) model performing sentiment analysis of product reviews?

A. Requiring customers to authenticate access to their accounts prior to writing product reviews

B. Peer reviewing code that acquires product reviews from social media posts

C. Hiring a marketing firm to text links to customers requesting product reviews for monetary compensation

D. Augmenting the unbalanced product review data set with the use of oversampling by the model developer

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #55

When an auditor is using AI to test controls, what would be the HIGHEST risk to the audit's integrity?

A. AI generating test output in a confusing format

B. AI tests reviewed by an auditor relying solely on AI output

C. AI returning only medium-risk observations from the test

D. AI testing failing to include all relevant transactions in its analysis

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #56

An IS auditor notes that an AI modelachieved significantly better results on training data than on test data. After the development, a quality assurance (QA) team checks that all input variables and parameters match the technical design. Which of the following BEST describes this activity?

A. Model testing

B. Model verification

C. Model validation

D. Model tuning

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Free ISACA AAIA Practice Test & Real Exam Questions

Download Free ISACA AAIA Demo