Courseiva
Risk ManagementhardMultiple ChoiceObjective-mapped

ISC Risk Management Practice Question

You are evaluating the risk of an Artificial Intelligence (AI) model deployment. The model is susceptible to 'model inversion' attacks, where an attacker can reconstruct sensitive training data. What is the most effective engineering control to prevent this?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Apply differential privacy techniques to the training process.

Differential privacy adds statistical noise to the training data or the model's output, preventing the reconstruction of individual training samples while maintaining the model's overall utility.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Encrypt the model weights at rest.

    Why it's wrong here

    Weight encryption prevents unauthorized access to the model file, but it does not prevent attacks via the model's inference API.

  • Implement rate limiting on the model's API.

    Why it's wrong here

    Rate limiting may slow down an attacker, but it does not prevent model inversion if the attacker has sufficient queries.

  • Retrain the model on a smaller, obfuscated dataset.

    Why it's wrong here

    Reducing dataset size does not inherently prevent inversion and may decrease model performance.

  • Apply differential privacy techniques to the training process.

    Why this is correct

    Differential privacy provides a mathematical guarantee against the reconstruction of individual data points.

About these practice questions

This ISC question is part of Courseiva's 209-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official (ISC)² exam blueprint

This ISC practice question is part of Courseiva's free (ISC)² certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ISC exam.