QUESTION 61
When auditing a machine learning (ML) solution, false positives can BEST be assessed by examining the level of:

A. completeness.
B. precision.
C. accuracy.
D. recall.

Correct Answer: B
QUESTION 62
An IS auditor is evaluating an organization’s incident management program to ensure it is sufficiently prepared to manage Al-related incidents. Which of the following is MOST important for the auditor to validate?

A. The program prioritizes incidents based on alignment with industry leading practices.
B. The program includes processes to respond to Al model drift and data integrity attacks.
C. The program uses past Al-related incidents and resolutions to categorize current incidents.
D. The program mandates retraining Al systems after incidents are investigated.

Correct Answer: B
QUESTION 63

When auditing an Al system, which of the following steps ensures that Al model behavior is aligned with organizational objectives?

A. Model training
B. Problem framing
C. Data transformation
D. Algorithm debugging

Correct Answer: B
QUESTION 64
Which of the following BEST ensures that an Al system complies with user data ownership rights under privacy regulations?

A. Regularly conducting Al system performance testing for accuracy
B. Enforcing strict data retention policies to limit storage duration
C. Applying data clustering techniques to anonymize data sets
D. Implementing a transparent data consent management process

Correct Answer: D
QUESTION 65
A digital bank utilizes an Al system to generate credit scores. Which of the following would BEST mitigate the risk of sudden and unexplained changes in a borrower’s credit score?

A. Using only data from the last six months to one year to avoid outdated information affecting the credit score
B. Allowing the Al to operate fully autonomously to prevent processing delays
C. Ensuring the system is periodically reviewed and calibrated by human experts to maintain stability in predictions
D. Obtaining and validating the credit scores from third-party agencies to cross-check Al-generated results

Correct Answer: C
QUESTION 66
An IS auditor notes that an Al model achieved significantly better results on training data than on test data. Which of the following problems with the model has the IS auditor identified?

A. Bias
B. Overfitting
C. Underfitting
D. Generalization

Correct Answer: B
QUESTION 67
Which of the following is the PRIMARY objective of Al governance?

A. Defining clear roles and responsibilities for Al development, use, and oversight
B. Ensuring controls over Al are designed well and operate effectively
C. Promoting a positive return on investment (Rol) from Al projects
D. Implementing compliance and ethics controls for Al initiatives

Correct Answer: A
QUESTION 68
The PRIMARY objective of auditing Al systems is to:

A. maximize system efficiency and throughput.
B. minimize algorithm latency and information storage impacts.
C. identify biases and decision transparency.
D. optimize user experience and interface satisfaction.

Correct Answer: C
QUESTION 69
An IS auditor is auditing an organization’s data governance framework. The primary objective is to provide assurance that data management practices are standardized to support a trustworthy Al system. Which of the following should be the auditor’s MOST important consideration?

A. Data practices for training models
B. Portability of data
C. Accountability for data management
D. Retention of stored data

Correct Answer: A
QUESTION 70
Which of the following is the MOST important reason to perform regular ethical reviews of Al systems?

A. To ensure the systems align with the preservation of individual rights
B. To improve the accuracy and performance of the systems
C. To align Al system development with organizational values and principles
D. To identify and mitigate potential data drift within models

Correct Answer: A
QUESTION 71
An organization deploys an Al recruitment platform to screen job applicants. The IS auditor identifies that the platform’s decisions may be influenced by model bias. Which of the following risk mitigation strategies is BEST for the auditor to recommend?

A. Suspend the use of the Al system until the training data can be verified for fairness and compliance.
B. Implement a process to periodically test the Al system for biases and adjust parameters as needed.
C. Retrain the Al model using an external data set certified for inclusivity and fairness.
D. Require manual reviews of all Al-generated recruitment decisions before hiring is finalized.

Correct Answer: B
QUESTION 72
Which of the following is MOST important to have in place when initially populating data into a data frame for an Al model?

A. An analysis of exploratory data that checks for incorrect data types, null values, and duplicate entries
B. The box charts, histograms, scatterplots, and Venn diagrams that identify correlations and outliers
C. The code for separating data into training and testing data sets
D. An approved risk assessment for including, excluding. or subsequently dropping data attributes from the model

Correct Answer: A
QUESTION 73
An organization’s system development process has been enhanced with Al. Which of the following features presents the GREATEST risk?

A. The Al allocates resources for new system development projects.

B. All codes are generated by Al without human oversight.
C. The Al personalizes applications for the user.
D. Non-technical users are validating Al results.

Correct Answer: B
QUESTION 74
An organization is using information gathered from customer accounts to train its Al chatbot. Which of the following is the GREATEST risk associated with this practice?

A. Al bias
B. Disclosure of personal information
C. Transparency
D. Al model hallucinations

Correct Answer: B
QUESTION 75
When auditing a research agency’s use of generative Al models for analyzing scientific data, which of the following is MOST critical to evaluate in order to prevent hallucinatory results and ensure the accuracy of outputs?

A. The measures in place to ensure the appropriateness and relevance of input data for generative Al models
B. The frequency of data audits verifying the integrity and accuracy of inputs
C. The effectiveness of data anonymization processes that help preserve data quality
D. The algorithms for generative Al models designed to detect and correct data bias before processing

Correct Answer: A
QUESTION 76
An organization uses an Al-powered tool to detect and respond to cybersecurity threats in real time. An IS auditor finds that the tool produces excessive false positives, increasing the workload of the security team. Which of the following techniques should the auditor recommend to BEST evaluate the tool’s effectiveness in managing this issue?

A. Deploy a machine learning (ML) validation tool to increase the model’s accuracy and performance.
B. Conduct penetration testing to assess the system’s ability to detect genuine threats.
C. Use a log analysis tool to examine the types and frequency of alerts generated.
D. Implement a benchmarking tool to compare the system’s alerting capability with industry standards.

Correct Answer: C
QUESTION 77
Which of the following is the PRIMARY benefit of implementing a robust data governance framework specific to Al solutions in an organization?

A. It fosters adherence to industry regulations while minimizing the risk of data breaches and privacy violations.
B. It accelerates Al implementation timelines by fully automating data preparation processes.
C. It focuses on enhancing the accuracy and reliability of Al model predictions.
D. It reduces the need for human oversight, ensuring seamless and autonomous data governance.

Correct Answer: A
QUESTION 78
When utilizing a machine learning (ML) model to predict whether a wind turbine electricity generator will fail, which model evaluation metric should be the PRIMARY focus?

A. Specificity
B. Accuracy
C. Recall
D. Precision

Correct Answer: C
QUESTION 79
In the context of an Al implementation, which of the following actions is MOST critical for an organization’s change management program?

A. Conducting a comprehensive risk assessment specific to Al-related changes
B. Reviewing documentation for Al system changes, updates, and patches
C. Ensuring the organization has a dedicated Al governance committee
D. Verifying that all employees have completed mandatory Al ethics training

Correct Answer: A
QUESTION 80
An organization is adopting Al for its procurement and inventory teams, raising concern from stakeholders that they will lose their jobs due to Al. Which of the following is the BEST way for the IS auditor to assess whether the potential negative impacts were minimized?

A. Review human-centered design practices to determine how they were considered.
B. Review the Al roadmap for short-term and long-term milestones.
C. Review how the project management team collected feedback in engagement activities.
D. Review the current state assessment of how Al may impact the organization.

Correct Answer: A