QUESTION 81
Which of the following is the BEST way to support the development and design of high-risk Al systems?

A. Implement multi-factor authentication (MFA) for all users accessing the Al system.
B. Conduct regular training sessions for users on data privacy.
C. Ensure the availability of trustworthy data sets.
D. Regularly back up the Al system’s data to a secure, offsite location.

Correct Answer: C
QUESTION 82
Which of the following is the MOT important risk for an IS auditor to consider when reviewing the adoption of an Al system?

A. Costs associated with Al system maintenance
B. Resistance to the use of Al technology
C. Bias in Al system decision making
D. Immaturity of Al systems in the industry

Correct Answer: C
QUESTION 83
Which of the following is the PRIMARY reason IS auditors must be aware that generative Al may return different investment recommendations from the same set of data?

A. Limitations can arise in the quantification of risk profiles.
B. Neural node access varies each time the process is executed.
C. Computational logic is based on probabilities.

D. Servers are reconfigured periodically.

Correct Answer: C
QUESTION 84
An organization uses an Al image generation platform to create promotional materials. An IS auditor identifies that the platform includes copyrighted images in its training data. Which of the following is the auditor’s BEST recommendation to address this issue?

A. Implement a manual review process to ensure no copyrighted images are used in generated outputs.
B. Use a platform that certifies the provenance and licensing of its training data.
C. Suspend the use of the platform until the training data is sanitized.
D. Label all Al-generated images to disclaim the possibility of third-party content.

Correct Answer: B
QUESTION 85
Which of the following strategies used by modelers to enhance data accuracy has the GREATEST risk of bias and information loss?

A. Separating multiple data attributes within one field into individual attribute columns
B. Placing numerical data into bins or buckets for a manageable quantity of correlations and result analyses
C. Identifying and deleting duplicate entries in the data set
D. Filing blank attributes in records with the mean, median, or mode within a grouping

Correct Answer: D
QUESTION 86
Which of the following is the MOST important consideration when auditing the data used for training an Al model?

A. Timeliness
B. Understandability
C. Representativeness
D. Predictability

Correct Answer: C
QUESTION 87
An IS auditor reviewing documentation for an Al model notes that the modeler utilized a K-means clustering algorithm, which clusters data into categories for correlations and analysis. Which of the following is the MOST important risk for the auditor to consider?

A. K-means clustering requires the modeler to supervise the learning analysis, which can introduce bias.
B. K-means clustering determines the number of clusters for the modeler without supervision.
C. K-means clustering algorithms are significantly sensitive to outliers and dependent on the similarity of units of measure.
D. K-means clustering is not a common data clustering method due to its complexity and difficulty categorizing data correctly.

Correct Answer: C
QUESTION 88
Which of the following is an IS auditor’s MOST important course of action when determining whether source data should be entered into approved generative Al tools to assist with an audit?

A. Determine whether any Al model hallucinations have occurred.
B. Validate that the tool provides a privacy notice.

C. Determine whether the information is reliable.
D. Validate that the tool is leveraging the latest model.

Correct Answer: C
QUESTION 89
Which of the following is the PRIMARY purpose of an Al acceptable use policy?

A. Outlining Al usage monitoring procedures
B. Educating employees on where to find and how to use Al tools
C. Explaining the distinction between different types of Al
D. Establishing guidance on the ethical use of Al

Correct Answer: D
QUESTION 90
Which of the following Al system characteristics would BEST help an IS auditor evaluate the system’s algorithm?

A. The Al system uses archived transaction data to provide decisions.
B. The Al system algorithm uses training data to inform decision output.
C. The Al system provides multiple options for model training.
D. The Al system provides transparent justification of decisions.

Correct Answer: D
QUESTION 91
Which of the following is the GREATEST benefit to an IS auditor using tree-based feature importance?

A. It determines which specific Al model contains the most complete source data.
B. It determines which specific Al model is the most reliable for migration into production.
C. It identifies the parameters utilized by the Al model when drawing its conclusions.
D. It identifies key data attributes influencing Al model conclusions.

Correct Answer: D
QUESTION 92
Which of the following would be of GREATEST concern to an Is auditor reviewing an organization’s Al policies and procedures?

A. The Al model does not have an approval process for production changes.
B. The data privacy policy has not been reviewed in the past three years.
C. The documentation of Al models does not address business resiliency and disaster recovery.
D. External validation is not required for Al systems before deployment.

Correct Answer: D
QUESTION 93
An IS auditor is using Al to scan invoices to detect suspicious patterns for fraud. Which of the following is the GREATEST risk?

A. Data misinterpretation leading to incorrect conclusions
B. Less reliable data as compared with traditional methods
C. Disruption of audit procedure timing and staffing
D. Need for the audit team to learn Al prompt engineering

Correct Answer: A

QUESTION 94
When assessing the potential risk of implementing an Al system, it is MOST important to validate the model’s:

A. processing speed and computational efficiency.
B. number of parameters and its overall complexity.
C. decision-making explanations and interpretability of its outputs.
D. compatibility with existing legacy software used by the organization.

Correct Answer: C
QUESTION 95
An IS auditor is utilizing an Al chat tool to assist with grammar and improve the overall readability of a report they are writing. Which of the following is the MOST significant risk the auditor should consider when using this Al tool?

A. The Al tool may introduce new grammatical errors that were not present in the original text.
B. The auditor may become overly reliant on the Al tool, compromising their own writing skills,
C. The Al tool may alter the intended meaning of the content, leading to misinterpretation of the report.
D. The use of the Al tool may increase the risk of intellectual property violations.

Correct Answer: C
QUESTION 96
Which key performance indicator (KPI) BEST indicates the quality of the data used in Al model training?

A. Linearity of patterns within the data set when a log-transformed scale is applied
B. Number of features within the data set
C. The difference between the mean and median of the data set
D. Percentage of missing values removed from the data set

Correct Answer: D
QUESTION 97
Which of the following metrics should an IS auditor recommend as a key performance indicator (KPI) to assess the reliability of a natural language processing Al model?

A. Landmark localization error
B. Receiver operating characteristic curve
C. Recall-oriented understudy for gifting evaluations
D. Mean squared error

Correct Answer: C
QUESTION 98
Which of the following controls BEST helps reduce the risk of hallucinations in an Al model?

A. Implementing a human-in-the-loop approach
B. Reducing the model’s creativity score
C. Improving model transparency
D. Requiring model output explanations

Correct Answer: A
QUESTION 99
Which of the following is the MOST significant risk associated with a deep learning system algorithm being updated as it learns?

A. Project stakeholders may not endorse the system because its behavior may be contrary to their expectations.
B. System algorithms can easily be modified by attackers because the algorithms reside in system memory.
C. The system may generate discriminatory output because of biases in training data.
D. Operational risk may increase because the system is continuously running.

Correct Answer: C
QUESTION 100
An organization uses an Al video generation platform to create videos for public audiences. An IS auditor notes that there are no clear governance policies defining how viewers should be informed that content is generated by Al. Which of the following recommendations would BEST ensure the ethical use of Al within this platform?

A. Limit access to the video generation platform to approved users within the organization.
B. Conduct regular content accuracy checks to ensure Al-generated videos meet quality expectations.
C. Establish a policy requiring all Al-generated content to be labeled as such for transparency.
D. Improve the production quality of Al-generated content to match industry standards.

Correct Answer: C