AAISM Practice Test

AAISM Practice Test practice questions, page 5 of 12, with answer review and explanations.

Question 21

Which of the following should be done FIRST when developing an acceptable use policy for generative AI?

  1. Consult with risk management and legal.
  2. Review AI regulatory requirements.
  3. Determine the scope and intended use of AI.
  4. Review existing company policies.

Question 22

An organization needs large data sets to perform application testing. Which of the following would BEST fulfill this need?

  1. Using open-source data repositories
  2. Reviewing AI model cards
  3. Performing AI data augmentation
  4. Incorporating data from search content

Question 23

In the context of generative AI, which of the following would be the MOST likely goal of penetration testing during a red-teaming exercise?

  1. Generate outputs that are unexpected using adversarial inputs.
  2. Stress test the model's decision-making process.
  3. Degrade the model's performance for existing use cases.
  4. Replace the model's outputs with entirely random content.

Question 24

Which of the following is MOST important for an organization to consider when implementing a preventive security safeguard into a new AI product?

  1. Penetration testing
  2. Input sanitization
  3. Model output monitoring
  4. Differential privacy

Question 25

As organizations increasingly rely on vendors to develop AI systems, which of the following is the MOST effective way to monitor vendors and ensure compliance with ethical and security standards?

  1. Mandating that vendors share source code and AI documentation with the contracting party
  2. Requiring vendors to monitor their adherence to ethics and security standards
  3. Conducting regular audits of vendor processes and adherence to AI development guidelines
  4. Allowing vendors to self-attest ethical AI compliance and implement benchmark monitoring