AAIA Practice Test practice questions, page 13 of 23, with answer review and explanations.
Question 61
An organization uses an AI-based chatbot that collects customer data during interactions. Which of the following is MOST important to ensure compliance with data consent requirements?
Obtaining consent each time queries are processed by the chatbot
Deleting data immediately following customer interactions with the chatbot
Anonymizing user interaction data after three months
Embedding a consent mechanism that provides clear options before data collection begins
Question 62
A large organization is implementing a new AI system that uses customer data. Which of the following is the BEST approach for risk mitigation to protect customer privacy?
Implement a mechanism for customers to opt out of the use of their data.
Assign sole responsibility for risk mitigation to the development team.
Implement data anonymization and impact assessments.
Conduct periodic risk and vulnerability assessments.
Question 63
An IS auditor learns that the organization’s AI solution is configured with web integration enabled. Which of the following is the MOST important control for the auditor to validate?
Data augmentation activities prior to model building
Key performance indicator (KPI) metrics for model inference time
Activity logging with integration to the organization’s SIEM system
Separation of duties between the model creator and the model tester
Question 64
Which of the following is the GREATEST risk resulting from excessive agency in AI systems?
Inefficient prioritization of tasks
Uncontrolled access and unauthorized actions
Slower AI system responses and performance
Increased need for oversight of model actions
Question 65
During an audit of an organization that has adopted AI, it was discovered that data ownership responsibilities were not clearly defined. Which of the following is the MOST likely consequence of this gap?
Higher operational costs for managing data storage solutions
Reduced organizational reliance on AI solutions
Decreased performance of AI models due to redundant data ownership
Increased risk of data breaches due to lack of accountability