AAISM AI Technologies And Controls Practice Question
When securing a large language model (LLM) using the OWASP Top 10 for LLMs, which control is most effective against 'Insecure Output Handling'?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enforcing strict output validation and sanitization
Insecure Output Handling occurs when a model output is interpreted by a downstream system without sanitization. Output validation (canonicalization) is the primary defense.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Using fine-grained RBAC
Why it's wrong here
RBAC manages who accesses the model, not what the model outputs.
- ✗
Implementing Rate Limiting
Why it's wrong here
Rate limiting prevents DoS, not output injection.
- ✗
Encrypting training data
Why it's wrong here
Encryption protects data at rest, not output handling.
- ✓
Enforcing strict output validation and sanitization
Why this is correct
Sanitizing model output before downstream execution prevents cross-site scripting or code injection.
About these practice questions
One of 205 original AAISM practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official ISACA exam blueprint
This AAISM practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AAISM exam.