[2026] ISACA Advanced in AI Security Management (AAISM)

문제1

Which of the following is MOST appropriate to assess the risk of a new AI model being compromised when encountering inputs not represented in the training data?

A. Behavioral consistency testing

B. Adversarial input detection

C. Sensitivity testing

D. Out-of-distribution detection

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제2

Which of the following is the BEST way for an organization to mitigate the use of deepfakes for social engineering?

A. Implement a robust business continuity plan (BCP).

B. Develop biometric authentication controls.

C. Increase investment in the security operations center (SOC).

D. Require an additional method of identity verification.

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제3

A chatbot was found to generate low-quality and inaccurate output, and further investigation led to the discovery of insecure third-party libraries in use. Which of the following would be the BEST approach to prevent this incident from reoccurring?

A. Perform automated data validation and access control review.

B. Employ strict content security policies (CSPs) and document asset listing.

C. Establish secure coding practices and perform testing, evaluation, verification, and validation (TEVV).

D. Sanitize input and implement rate limiting.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제4

Which of the following BEST describes an adversarial attack on an AI model?

A. Providing inputs that mislead the AI model into incorrect predictions

B. Reverse engineering the AI model using social engineering techniques

C. Conducting denial-of-service (DoS) attacks against AI APIs

D. Attacking the underlying hardware of the AI system

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제5

Which of the following BEST describes the role of model cards in AI solutions?

A. They are primarily used to visualize the performance of AI models

B. They are used to automatically fine-tune AI models by adjusting hyperparameters based on user feedback

C. They help developers create synthetic data and train AI models

D. They provide a standardized way to document the training data and AI model use cases

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제6

Security and assurance requirements for AI systems should FIRST be embedded in the:

A. Model training phase

B. Model design phase

C. Model deployment phase

D. Model testing phase

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제7

Which risk is BEST mitigated by automatically clearing in-memory state at the end of each agent application session?

A. Model bias drift

B. Excessive token billing

C. Transport Layer Security (TLS) downgrade attacks

D. Exfiltrated residual data

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제8

A bank is training an AI credit scoring model on a vast amount of sensitive customer data. Which of the following is the MOST critical security risk in this training process?

A. Model inversion or membership inference attacks

B. Data poisoning to corrupt training outcomes

C. Resources needed to retrain and validate the AI model

D. Algorithmic bias leading to discriminatory lending

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제9

Which of the following is the MOST effective strategy for penetration testers assessing the security of an AI model against membership inference attacks?

A. Measuring AI model accuracy on the test set

B. Analyzing AI model confidence scores to indicate training data

C. Generating synthetic data to replace the training data

D. Disabling AI model logging to reduce noise during testing

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제10

AI developers often find it difficult to explain the processes inside deep learning systems PRIMARILY because:

A. Generated knowledge dynamically changes in memory without being tracked by change history logs

B. Neural network architectures can include statistical methods that are not fully understood

C. Training data input for learning is spread throughout the public domain and continues to change

D. Applied algorithms are based on probability theories to improve system performance

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제11

Which of the following types of attacks would a malicious actor MOST likely use to target an AI model's training data and compromise the accuracy of the model's outputs?

A. Denial of service (DoS)

B. Inference attack

C. Data poisoning

D. Data exfiltration

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제12

Which of the following BEST enables an organization to maintain visibility to its AI usage?

A. Measuring the impact of AI implementation using key performance indicators (KPIs)

B. Ensuring the board approves the policies and standards that define corporate AI strategy

C. Maintaining a monthly dashboard that captures all AI vendors

D. Maintaining a comprehensive inventory of AI systems and business units that leverage them

정답: D

설명: (Fast2test 회원만 볼 수 있음)

ISACA Advanced in AI Security Management (AAISM) - AAISM무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트