AAISM Practice Test

AAISM Practice Test practice questions, page 8 of 12, with answer review and explanations.

Question 36

Which of the following is the MOST effective use of AI-enabled tools in a security operations center (SOC)?

  1. Employing AI-enabled tools to reduce false negatives by detecting subtle attack patterns
  2. Replacing human analysis with automated AI decision-making processes
  3. Assigning AI-enabled tools to triage non-critical alerts to preserve SOC resources
  4. Using AI-enabled tools exclusively to classify all types of security incidents

Question 37

When implementing a generative AI system, which of the following approaches will BEST prevent misalignment between the corporate risk appetite and tolerance?

  1. Creating and maintaining an AI risk register
  2. Establishing and monitoring acceptable levels of AI system risk
  3. Performing an AI impact assessment
  4. Ensuring effective AI key performance indicators (KPIs)

Question 38

Which of the following controls BEST mitigates the inherent limitations of generative AI models?

  1. Adopting AI-specific regulations
  2. Classifying and labeling AI systems
  3. Ensuring human oversight
  4. Reverse engineering the models

Question 39

Which of the following recommendations would BEST help a service provider mitigate the risk of lawsuits arising from generative AI's access to and use of internet data?

  1. Review log information that records how data was collected.
  2. Disclose service provider policies to declare compliance with regulations.
  3. Activate filtering logic to exclude intellectual property flags.
  4. Appoint a data steward specialized in AI to strengthen security governance.

Question 40

Which of the following types of testing can MOST effectively mitigate prompt hacking?

  1. Adversarial
  2. Input
  3. Load
  4. Regression