AAISM Practice Test 2 — 10 Questions

Question 1

A machine learning model is showing signs of 'data drift'. What is the most effective initial step in the risk assessment process?

Accepted Answer

Analyze the statistical distribution of input production data versus training data.. Data drift monitoring involves comparing current production data distributions against training data distributions to detect performance decay.

Answer

Retrain the model immediately with all available data.

Answer

Shut down the application to prevent incorrect predictions.

Answer

Change the model architecture to a more complex design.

Question 2

A developer is implementing 'Differential Privacy' on a training dataset. What is the primary trade-off they are managing?

Accepted Answer

Privacy budget (epsilon) vs. model utility/accuracy.. Differential privacy adds noise to training data to preserve privacy, which inherently reduces the utility or accuracy of the model.

Answer

Model training speed vs. model cost.

Answer

Security of the training pipeline vs. developer productivity.

Answer

Deployment latency vs. model scalability.

Question 3

Which TWO of the following are considered 'AI Supply Chain' risks?

Accepted Answer

Inclusion of poisoned data in third-party datasets.. AI supply chain risks include dependencies on external data and untrusted pre-trained models.

Answer

Lack of internal developer training.

Answer

Excessive use of cloud storage.

Answer

High turnover of AI research staff.

Question 4

What is 'AI Shadowing' or 'Shadow AI' in an enterprise setting?

Accepted Answer

Employees using unapproved AI tools for work tasks.. Shadow AI refers to the use of AI tools and models by employees without the knowledge or approval of the IT/Security department.

Answer

The practice of monitoring AI usage in real-time.

Answer

The process of testing models before release.

Answer

The use of AI for internal cybersecurity tasks only.

Question 5

Which THREE actions should be included in an AI incident response plan?

Accepted Answer

Conducting a root cause analysis post-incident.. Communication, containment, and root cause analysis are standard requirements for effective incident management.

Answer

Deleting the model without a backup.

Answer

Increasing the marketing budget.

Question 6

Which document should define the organization's stance on AI transparency and explainability?

Accepted Answer

The Corporate AI Policy.. The AI Policy is the foundational document that sets the requirements for transparency, accountability, and explainability across the enterprise.

Answer

The employee breakroom notice.

Answer

The server configuration log.

Answer

The marketing brochure.

Question 7

When a model fails in production, what is the first step in the 'Incident Response' process?

Accepted Answer

Containment and impact assessment.. Identifying and containing the impact is the immediate priority to prevent further risk.

Answer

Writing a press release.

Answer

Firing the developer.

Answer

Ignoring the error.

Question 8

Which THREE security controls are effective against 'Data Leakage' in AI?

Accepted Answer

Data Loss Prevention (DLP) tools.. DLP, access control, and output filtering are the standard triad for preventing sensitive data exposure via AI.

Answer

Using a louder cooling system.

Answer

Increasing the model's training duration.

Question 9

Which mechanism best ensures 'Auditability' of AI decision-making?

Accepted Answer

Maintaining immutable logs of inputs, model versions, and outputs.. Comprehensive logging of inputs, model parameters, and outputs is essential to recreate and audit decisions.

Answer

Deleting logs after 24 hours.

Answer

Using proprietary black-box models only.

Answer

Hardcoding all decisions.

Question 10

Which THREE criteria are essential for evaluating the risk of an AI vendor's 'Model Card'?

Accepted Answer

Disclosure of training data sources.. Model Cards provide transparency regarding intended use, limitations, and performance, which are critical for risk assessment.

Answer

The vendor's annual financial report.

Answer

The number of employees at the vendor.