AAIA Practice Test

AAIA Practice Test practice questions, page 18 of 23, with answer review and explanations.

Question 86

Which of the following provides the BEST evidence that an organization's AI integration is aligned with its overall technology strategy?

  1. Key performance indicators (KPIs) have been defined for AI systems.
  2. The organization has developed and socialized AI use policies.
  3. Management promotes a culture of innovation.
  4. The IT department includes many individual contributors with AI expertise.

Question 87

An organization has deployed an AI-powered customer service chatbot trained using customer chat logs. When reviewing AI risk assessment documentation, which of the following should be the IS auditor's GREATEST concern?

  1. Limited AI model capability to incorporate and adapt to new data
  2. Obsolete procedures leading to inadequate data integrity validation
  3. Reputational impacts resulting from inaccurate chatbot responses
  4. Insufficient access controls leading to unauthorized customer data exposure

Question 88

Which of the following is the GREATEST risk associated with deploying an AI system with ineffective anomaly detection?

  1. Inconsistent AI system configuration management
  2. Undetected data poisoning that impacts AI decision quality
  3. Delayed incident response to AI model drift
  4. Failure to comply with AI reporting standards

Question 89

An IS auditor is considering using a web-based AI tool to update an audit report. What should be the MOST important consideration before inputting the report?

  1. The AI tool alignment with organizational report formatting
  2. Safeguard measures of the AI tool
  3. Impact on the audit budget
  4. Compliance with organizational data protection requirements

Question 90

When an IS auditor uses generative AI with external retrieval-augmented generation (RAG) to gather evidence during an audit, which of the following poses the GREATEST data security risk?

  1. Sensitive internal context may be included in queries sent to external services.
  2. Personal information may be shared based on model training data.
  3. External search engines only respond to public data.
  4. The model might fail to retrieve data from the vector.