20+ practice questions focused on AI Technologies And Controls — one of the most tested topics on the ISACA Advanced in AI Security Management (AAISM) (AAISM) exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start AI Technologies And Controls PracticeWhich TWO actions should be taken to enforce Least Privilege access for developers interacting with SageMaker Model Monitor?
Explanation: Option B is correct because restricting access to the 'sagemaker:CreateModelMonitor' action ensures developers can only create model monitors when their role explicitly permits it, which is a direct application of least privilege by limiting the specific SageMaker API action rather than granting broad permissions. Option C is correct because granting s3:PutObject on only the bucket containing baseline data scopes write access to the exact resource developers need for uploading baseline datasets, avoiding overly broad S3 permissions. Option A is incorrect because allowing all 'iam:PassRole' actions lets developers pass any role to SageMaker, enabling privilege escalation and violating least privilege. Option D is incorrect because the 'SageMakerFullAccess' managed policy grants wide-ranging permissions far beyond what Model Monitor requires. Option E is incorrect because enabling root access to the underlying EC2 instance provides excessive, unnecessary privileges and is not a valid least-privilege control for SageMaker Model Monitor.
During an adversarial training cycle, you notice the model's accuracy on the validation set drops significantly despite high training accuracy. Which technique should you apply to mitigate potential model poisoning?
Explanation: Differential Privacy via DP-SGD (Differentially Private Stochastic Gradient Descent) adds calibrated noise to gradients during training, which bounds the influence of any single training example on the model. This directly mitigates data poisoning by limiting how much a malicious or corrupted sample can shift the model's parameters, while also providing privacy guarantees. The validation-accuracy drop with high training accuracy signals overfitting to poisoned data, which DP-SGD helps counteract.
When implementing Google Cloud's 'Vertex AI' model guardrails, you need to prevent the leakage of PII in model outputs. Which configuration tool is used to enforce these constraints at the request/response level?
Explanation: The Vertex AI 'Safety Settings' and 'Content filtering' allow practitioners to define thresholds for harassment, hate speech, and PII leakage.
You are configuring Microsoft Defender for Cloud for an Azure OpenAI deployment. To detect prompt injection attempts effectively, which specific setting must be enabled in the 'Microsoft Defender for Cloud Apps' dashboard?
Explanation: AI Security Posture Management (AI-SPM) in Microsoft Defender for Cloud Apps is the specific capability that provides visibility into AI workloads, including detection of prompt injection attempts against Azure OpenAI deployments. Enabling AI-SPM activates monitoring of AI interactions, identifies risky prompts, and surfaces security recommendations tailored to generative AI. It is the designated setting for AI-specific threat detection in the Defender for Cloud Apps dashboard.
Your organization uses Azure OpenAI. You need to ensure that no sensitive data (e.g., credit card numbers) is sent to the model. Which specific service feature should be enabled to intercept and mask this data?
Explanation: Azure OpenAI Content Safety provides text filtering and PII masking.
+15 more AI Technologies And Controls questions available
Practice all AI Technologies And Controls questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of AI Technologies And Controls. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
AI Technologies And Controls questions on the AAISM frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. AI Technologies And Controls is tested as part of the ISACA Advanced in AI Security Management (AAISM) (AAISM) blueprint. Practicing with targeted AI Technologies And Controls questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free AAISM practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but AI Technologies And Controls is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full AI Technologies And Controls practice session with instant scoring and detailed explanations.
Start AI Technologies And Controls Practice →