AAISM AI Risk Management Practice Question
Which THREE technical configurations help mitigate the risk of 'Model Exfiltration'?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Strict IAM policies limiting access to the model weight files.
Model exfiltration can be hindered by restricting access to the model, monitoring egress traffic, and obfuscating model responses.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Increasing the number of public endpoints.
Why it's wrong here
This increases the attack surface.
- ✓
Strict IAM policies limiting access to the model weight files.
Why this is correct
Controlling file access is the most direct defense against exfiltration.
- ✓
API response truncation or fuzzing to hide internal weights.
Why this is correct
Obfuscating outputs makes cloning the model more difficult.
- ✓
Egress traffic filtering from the model inference environment.
Why this is correct
Restricting where model data can be sent prevents exfiltration.
- ✗
Using clear text for all model logs.
Why it's wrong here
This is a security risk.
About these practice questions
This AAISM question is part of Courseiva's 205-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official ISACA exam blueprint
This AAISM practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AAISM exam.