QUESTION 181
An organization is developing an Al system that integrates data from multiple external sources without clearly defined data ownership policies. Which of the following is the GREATEST concern in this situation?

A. Deficiencies in policies and procedures validating Al model accuracy
B. Gaps in Al privacy compliance and accountability
C. Limited documentation of user access permissions
D. Excessive dependence on automated data collection and cleansing

Correct Answer: B
QUESTION 182
Which of the following is the GREATEST risk of using Al to generate audit reports?

A. The Al system cannot integrate with management dashboard tools.
B. The Al system misrepresents control effectiveness.
C. The Al system uses inconsistent formatting across audit reports.
D. The Al system is not able to include historical audit findings.

Correct Answer: B
QUESTION 183

Which of the following is the GREATEST risk when training data is not separated into distinct training and testing sets?

A. Underfitting
B. Model drift
C. Overfitting
D. Hallucinations

Correct Answer: C
QUESTION 184
An IS auditor is reviewing change documentation of an Al model. Which of the following would pose the GREATEST risk?

A. Test results are not in a standardized format.
B. Management has not tested the model.
C. The seed used for testing is not documented.
D. There is a low number of test scenarios.

Correct Answer: C
QUESTION 185
Which of the following is the BEST reason that recurrent neural networks enable language translation of documents?

A. The process is unidirectional.
B. The process is sequential.
C. The process is specialized for grid data.
D. The process uses association rules.

Correct Answer: B
QUESTION 186
An Al audit reveals that a loan approval model has a significantly higher rejection rate for applicants from a specific demographic group. Which of the following should be
management’s PRIMARY response?

A. Conduct comprehensive bias analysis.
B. Accept the audit findings as within risk tolerance.
C. Determine if audit sampling IS sufficient.
D. Synthesize more data of the affected demographic group.

Correct Answer: A
QUESTION 187
Which of the following roles is BEST suited to define the implementation roadmaps for adopting Al solutions?

A. Internal audit
B. Steering committee
C. Product management
D. Risk management committee

Correct Answer: B
QUESTION 188
Which of the following IS the PRIMARY objective of performing adversarial testing on Al models?

A. Fostering security awareness
B. Determining key risk indicators (KRIs)
C. Identifying control gaps
D. Validating Al incident response plans

Correct Answer: C
QUESTION 189
Which of the following provides the BEST evidence that an organization’s Al integration is aligned with its overall technology strategy?

A. The IT department includes many individual contributors with Al expertise.
B. Key performance indicators (KPIs) have been defined for Al systems.
C. The organization has developed and socialized Al use policies.
D. Management promotes a culture of innovation.

Correct Answer: B
QUESTION 190
An organization has deployed an Al-powered customer service chatbot trained using customer chat logs.
When reviewing Al risk assessment documentation, which of the following should be the IS auditor’s GREA TE ST concern?

A. Insufficient access controls leading to unauthorized customer data exposure
B. Obsolete procedures leading to inadequate data integrity validation
C. Reputational impacts resulting from inaccurate chatbot responses
D. Limited Al model capability to incorporate and adapt to new data

Correct Answer: A
QUESTION 191
An IS auditor is assessing the implementation of Al tools for evidence collection involving multiple data sources. Which of the following outcomes BEST indicates that Al-driven evidence collection has improved the audit process?

A. Reduced time spent gathering data with fewer errors in evidence compilation
B. Ability to rely on unstructured data with minimal cleansing
C. Elimination of human judgment in data and evidence analysis
D. Extended reporting timelines that allow for Al model retraining

Correct Answer: A
QUESTION 192
An IS auditor is considering the integration of Al technique into the audit sampling process. Which of the following BEST enables the auditor to identify high. Risk transactions within large data sets for targeted sampling?

A. Natural language processing (NLP)
B. Optical character recognition (OCR)
C. Predictive analytics
D. Rule-based analytics

Correct Answer: C
QUESTION 193
During a walk-through, an IS auditor observes an Al engineer entering a prompt that manipulates the Al model’s behavior. Which of the following is the BEST control to prevent this?

A. Retrain the model immediately.
B. Enforce an input/output template.
C. Encrypt the underlying data.
D. Deploy adversarial training.

Correct Answer: B
QUESTION 194
When an IS auditor uses generative Al with external retrieval-augmented generation (RAG) to gather evidence during an audit, which of the following poses the GREATEST data security risk?

A. External search engines only respond to public data.
B. Sensitive internal context may be included in queries sent to external services.
C. The model might fail to retrieve data from the vector.
D. Personal information may be shared based on model training data.

Correct Answer: B
QUESTION 195
An organization is using a large language model (LLM) to assist in evaluating loan applications, but the training data used is known to be incomplete. Which of the
following is the GREATEST associated risk?

A. Unfair loan decisions
B. Reduced customer satisfaction
C. Delays in loan approval
D. Increased manual processing of applications

Correct Answer: A
QUESTION 196
Which of the following IS the PRIMARY advantage of using K-fold cross validation when evaluating the performance of a machine learning (ML) model?

A. It facilitates performing regressions on smaller data sets.
B. It helps minimize computational costs when evaluating complex models.
C. It uses multiple training and testing cycles to minimize overfitting.
D. It enables the reduction of model bias by setting the K variable to higher values.

Correct Answer: C
QUESTION 197
A newly deployed fraud detection model is misclassifying transactions due to inconsistent formatting in the data stream. Which of the following is the IS auditor’s BEST recommendation to ensure consistent model performance?

A. Train staff on fraud patterns and post-deployment alert handling
B. Define and document the technical specifications for incoming data
C. Increase model complexity to handle more types of data input
D. Enable real-time monitoring of transaction volumes

Correct Answer: B
QUESTION 198
What is the MOST important reason government organizations should provide regular Al training programs for all staff?

A. To minimize the cost of Al deployment

B. To allow staff to understand the tools available
C. To reduce earning using outdated information
D. To ensure staff are up to date on ethical considerations

Correct Answer: D
QUESTION 199
Which of the following should be an IS auditor’s GREATE ST cancer if class imbalance is identified in training data for an Al model?

A. Data quality
B. Model overfitting
C. Data drift
D. Model bias

Correct Answer: D
QUESTION 200
Which of the following BEST demonstrates effective coordination to ensure comprehensive oversight of an Al system deployed across multiple jurisdictions?

A. Centralizing responsibility under a single supervisory authority
B. Focusing oversight activities on technical anomaly detection metrics
C. Establishing joint oversight plans and communication channels between agencies
D. Relying on automated processes for anomaly detection and documentation

Correct Answer: C