AAIA Practice Test

AAIA Practice Test practice questions, page 4 of 23, with answer review and explanations.

Question 16

An organization uses an AI image generation platform to create promotional materials. An IS auditor identifies that the platform includes copyrighted images in its training data. Which of the following is the auditor’s BEST recommendation to address this issue?

  1. Suspend the use of the platform until the training data is sanitized.
  2. Label all AI-generated images to disclaim the possibility of third-party content.
  3. Implement a manual review process to ensure no copyrighted images are used in generated outputs.
  4. Use a platform that certifies the provenance and licensing of its training data.

Question 17

A bank uses a video-based know your customer (KYC) verification process. Cybercriminals exploit this process by using deepfake technology to impersonate bank customers. Which of the following countermeasures is the BEST way for the bank to mitigate this risk?

  1. Discontinuing the use of the video-based verification process
  2. Encrypting all customer data and communication
  3. Requesting additional identity and address documents for verification
  4. Leveraging AI-based liveness detection during video verification

Question 18

Which of the following is an IS auditor's MOST important course of action when determining whether source data should be entered into approved generative AI tools to assist with an audit?

  1. Validate that the tool is leveraging the latest model.
  2. Validate that the tool provides a privacy notice.
  3. Determine whether the information is reliable.
  4. Determine whether any AI model hallucinations have occurred.

Question 19

An AI social media platform uses an algorithm to increase user engagement that could unintentionally promote divisive content. Which of the following is the BEST course of action to mitigate this risk?

  1. Introduce controls allowing individuals to customize content preferences.
  2. Regularly audit and adjust algorithms to reduce biases.
  3. Obtain users' consent for the content they wish to view.
  4. Suspend the algorithm until concerns are addressed.

Question 20

Which use case for an AI model to be used by a food delivery service would pose ethical risk to the organization?

  1. Using customer service metrics for service speed and food quality to predict customer retention and forecast revenue
  2. Comparing total food preparation and delivery time to an industry benchmark to set key performance and risk indicators for individual restaurants
  3. Basing driver retention and termination decisions on the number of delivered orders per total hours worked as compared to an industry benchmark
  4. Correlating time, cost, delivery distance, and customer satisfaction metrics to issue coupons to customers receiving substandard service