ISACA AAIA Certification Exam Dumps with 93 Practice Test Questions [Q53-Q70]

Rate this post

ISACA AAIA Certification Exam Dumps with 93 Practice Test Questions

New AAIA Exam Dumps with High Passing Rate

ISACA AAIA Exam Syllabus Topics:

Topic	Details
Topic 1	AI Operations: It covers managing AI-specific data needs—including collection, quality, security, and classification—applying development lifecycle methodologies with privacy and security by design, change and incident management, testing AI solutions, identifying AI-related threats and vulnerabilities, and supervising AI deployments.
Topic 2	AI GOVERNANCE AND RISK: It encompasses understanding different AI models and their life cycles, guiding AI strategy, defining roles and policies, managing AI-related risks, overseeing data privacy and governance, and ensuring adherence to ethical practices, standards, and regulations.
Topic 3	Auditing Tools and Techniques: This section of the exam measures the skills of AI auditors and centers on auditing AI systems using appropriate tools and methods. It includes audit planning and design, sampling methodologies specific to AI, collecting audit evidence, using data analytics for quality assurance, and producing AI audit outputs and reports, including follow-up and quality control measures.

NO.53 An IS auditor is looking to expedite reporting for an audit with complex issues. Which of the following would be the MOST effective way for the auditor to use generative AI?

Developing action items discussed in closing meetings for management action plans

Developing a draft of an executive summary based on detailed findings and audit scope

Revising audit conclusions with precise verbiage to describe the audit observations

Revising audit background and scope information based on new information from management

NO.54 From a data appropriateness and bias perspective, which of the following should be of GREATEST concern when reviewing an AI model used in a credit scoring system?

The model incorporates the applicant’s loan history to assess spending habits.

The model utilizes historical credit data to predict future credit behavior.

The model considers the applicant’s income level as a key factor in the credit decision.

The model uses postal codes as a primary factor in determining creditworthiness.

NO.55 Which of the following is the PRIMARY purpose of an AI acceptable use policy?

Establishing guidance on the ethical use of AI

Outlining AI usage monitoring procedures

Educating employees on where to find and how to use AI tools

Explaining the distinction between different types of AI

NO.56 Which of the following is the MOST important risk for an IS auditor to consider when reviewing the adoption of an AI system?

Costs associated with AI system maintenance

Immaturity of AI systems in the industry

Bias in AI system decision making

Resistance to the use of AI technology

NO.57 Which of the following testing techniques would BEST validate whether an organization’s data governance program effectively ensures data quality and integrity for AI model training and deployment?

Performing a business impact analysis (BIA) to assess the consequences of AI model failure

Reviewing the organization’s AI software development life cycle documentation

Conducting a penetration test to identify vulnerabilities in the model

Assessing data lineage to verify the traceability of data sources

NO.58 An IS auditor notes the combined number of records utilized within the training, validation, and testing data sets exceeds the total number of records in the original data set. Which of the following is MOST important for the auditor to determine?

Whether the training, validation, and testing data sets were created in the correct order

Whether data leakage occurred from utilizing overlapping records in the data sets

Whether a sufficient number of records were utilized in the training data set

Whether the validation data set utilized the same number of records as the training data sets

NO.59 When using off-the-shelf AI models, which of the following is the MOST appropriate way for organizations to approach vendor management?

Ensure a minimum of three quotes have been obtained for market research and comparison.

Establish responsibility and clear terms for model updates and support.

Only use models from vendors with globally recognized accreditation.

Use the vendor only if the contract has been reviewed by the information security department.

NO.60 Which of the following controls helps mitigate the risk of competitors poisoning data utilized by a machine learning (ML) model performing sentiment analysis of product reviews?

Peer reviewing code that acquires product reviews from social media posts

Hiring a marketing firm to text links to customers requesting product reviews for monetary compensation

Augmenting the unbalanced product review data set with the use of oversampling by the model developer

Requiring customers to authenticate access to their accounts prior to writing product reviews

NO.61 During an audit of an investment organization’s AI-powered software, an IS auditor identifies a potential security risk. What is the GREATEST risk associated with staff exfiltrating organizational data to a generative AI tool?

Data contamination due to biased AI model outputs

Unauthorized data disclosure

Potential business disruptions

Excessive reliance on AI-generated insights

NO.62 Which of the following is MOST important for an IS auditor to review during an AI system audit in order to determine compliance with intellectual property and data rights?

Data performance metrics

Data usage agreements

Use of open-source intellectual property

Model runtime efficiency logs

NO.63 Which of the following key performance indicators (KPIs) are MOST important when evaluating whether an AI model meets business objectives?

Cost of resources required for AI model training

Number of users interacting with the AI model

Frequency of AI model retraining

AI model accuracy in predicting actual outcomes

NO.64 An AI social media platform uses an algorithm to increase user engagement that could unintentionally promote divisive content. Which of the following is the BEST course of action to mitigate this risk?

Introduce controls allowing individuals to customize content preferences.

Suspend the algorithm until concerns are addressed.

Obtain users’ consent for the content they wish to view.

Regularly audit and adjust algorithms to reduce biases.

NO.65 Which of the following is the MOST important consideration when auditing the data used for training an AI model?

Timeliness

Predictability

Representativeness

Understandability

NO.66 A digital bank utilizes an AI system to generate credit scores. Which of the following would BEST mitigate the risk of sudden and unexplained changes in a borrower’s credit score?

Ensuring the system is periodically reviewed and calibrated by human experts to maintain stability in predictions

Using only data from the last six months to one year to avoid outdated information affecting the credit score

Allowing the AI to operate fully autonomously to prevent processing delays

Obtaining and validating the credit scores from third-party agencies to cross-check AI-generated results

NO.67 A bank uses a video-based know your customer (KYC) verification process. Cybercriminals exploit this process by using deepfake technology to impersonate bank customers. Which of the following countermeasures is the BEST way for the bank to mitigate this risk?

Requesting additional identity and address documents for verification

Leveraging AI-based liveness detection during video verification

Encrypting all customer data and communication

Discontinuing the use of the video-based verification process

NO.68 An IS auditor is evaluating an organization’s incident management program to ensure it is sufficiently prepared to manage AI-related incidents. Which of the following is MOST important for the auditor to validate?

The program mandates retraining AI systems after incidents are investigated.

The program uses past AI-related incidents and resolutions to categorize current incidents.

The program includes processes to respond to AI model drift and data integrity attacks.

The program prioritizes incidents based on alignment with industry leading practices.

NO.69 When auditing the transparency of an AI system, which of the following would be the MOST effective way to understand the model’s decision-making process?

Evaluating the diversity of the training data set

Analyzing the complexity of the algorithms used

Assessing the computational cost of the model

Reviewing the explainability of AI outputs

NO.70 Which of the following is the MOST important course of action for an organization prior to allowing end users to utilize an AI tool?

Develop an AI policy with guidelines on appropriate use.

Determine the impact to the disaster recovery plan (DRP).

Implement baseline performance metrics.

Ensure a cybersecurity insurance clause is in place to include the use of AI.

Loading …