QUESTION 101
An IS auditor decides to implement an Al tool designed to detect anomalies in financial transaction data. Which of the following is the MOST important consideration?

A. The need for human oversight to validate the anomalies detected
B. The complexity of the Al algorithms used for anomaly detection
C. The ability of the Al tool to process data in real time
D. The cost of the Al tool compared to traditional methods

Correct Answer: A
QUESTION 102
Which of the following would BEST help an organization justify decisions made by an Al model?

A. Analyzing key performance indicator (KPI) trends to identify inconsistencies in the model’s predictions
B. Implementing a tool for model interpretability
C. Auditing the Al model to assess its alignment with business objectives and policies
D. Conducting adversarial testing to evaluate the model’s robustness

Correct Answer: B
QUESTION 103
During an audit of an Al solution, the modeler informs the IS auditor that data augmentation techniques were utilized. Which of the following BEST enables the auditor to determine the effectiveness of the data augmentation?

A. Affinity and diversity of augmented data compared to original data
B. Balance of data classes prior to and after augmentation
C. Feature importance summary of the model prior to and after augmentation
D. Performance metrics of the model prior to and after augmentation

Correct Answer: D
QUESTION 104
An IS auditor learns that the organization’s Al solution is configured with web integration enabled. Which of the following is the MOST important control for the auditor to validate?

A. Data augmentation activities prior to model building
B. Key performance indicator (KPI) metrics for model inference time
C. Activity logging with integration to the organization’s SIEM system
D. Separation of duties between the model creator and the model tester

Correct Answer: C
QUESTION 105
Which of the following processes is MOST important for an organization to have in place to ensure the credibility of Al outputs?

A. Model alignment
B. Data analytics
C. User consent
D. Data governance

Correct Answer: D
QUESTION 106
An IS auditor has received all journal entries posted for the fiscal year. Which of the following is the BEST way to use Al to detect anomalies in the population?

A. Reconcile transactions to invoices processed.
B. Implement ad hoc monitoring of transactions.
C. Apply predictive analysis to transactions.
D. Define risk score criteria for transactions.

Correct Answer: D
QUESTION 107
Which of the following controls would BEST minimize the risk of bias introduced into Al models from flawed training data?

A. Implementing enhanced access controls over Al model training data
B. Performing cross-validation of Al models
C. Separating Al training and production data
D. Testing Al models using adversarial methods

Correct Answer: B
QUESTION 108
Which of the following would BEST provide an IS auditor with information on predictions made by specific neural network model and provide visibility into risk associated with using that model?

A. Code details of the activation layers
B. Venn diagrams and box charts
C. Correlation matrix
D. Confusion matrix

Correct Answer: D
QUESTION 109
An IS auditor is evaluating an organization’s A-based hiring tool. The tool excludes candidates from postal codes correlating with specific demographic groups, despite not explicitly using race or ethnicity as input variables. Which of the following is the auditor’s BEST course of action?

A. Suggest deploying a different Al model that does not consider any personal data.
B. Recommend removing all geographic data from the Al model training to ensure fairness.

C. Assess proxy variables within the Al model that may correlate with sensitive attributes.
D. Advise the company to collect explicit demographic data to directly control for bias.

Correct Answer: C
QUESTION 110
When evaluating whether an Al algorithm deployed by an organization aligns with its business objectives, it is MOST important to:

A. review algorithm documentation for completeness.
B. confirm the outcomes from using the algorithm support strategic goals.
C. validate that data sources are identified in the business strategy.
D. verify the algorithm’s ability to process transactions accurately.

Correct Answer: B
QUESTION 111
An organization’s deployed Al model exhibits model drift. Which of the following is the BEST way to mitigate this issue?

A. Decrease the complexity of the model.
B. Replace the model with a rule-based system.
C. Implement continuous monitoring and retraining mechanisms.
D. Remove old and irrelevant data from the training data set.

Correct Answer: C
QUESTION 112
Which of the following is the MOST important consideration when using an Al tool to scan publicly available data for risk analysis for an upcoming audit?

A. Validating that the Al tool has been benchmarked against industry standards
B. Verifying the accuracy and reliability of the data obtained
C. Assessing the cost-effectiveness of using the Al tool
D. Analyzing the Al tool’s algorithms for efficiency and scalability

Correct Answer: B
QUESTION 113
An IS auditor is assessing an Al-powered chatbot that produces inaccurate or fabricated information for customer queries. Which of the following is the BEST recommendation when the model’s configuration emphasizes creativity over accuracy?

A. Add more randomness through external prompts.
B. Allow the Al model to self-correct its hallucinated outputs.
C. Adjust the models temperature parameter to lower randomness
D. Implement stricter prompt templates to constrain the model’s outputs.

Correct Answer: C
QUESTION 114
An organization uses third-party licensed data for training its Al models. During an audit, it is discovered that data usage restrictions were violated. Which of the following is the IS auditor’s MOST appropriate recommendation?

A. Implement stronger data clustering techniques.
B. Discontinue use of the Al model training data.
C. Strengthen system development life cycle (SDLC) controls.

D. Review all organizational data agreements.

Correct Answer: B
QUESTION 115
Which of the following is the GREATEST risk when an IS auditor integrates Al tools into the audit process?

A. Overreliance
B. Increased auditing costs
C. Lack of specialized knowledge
D. Inefficiencies

Correct Answer: A
QUESTION 116
The PRIMARY objective of conducting a red team simulation to test the security of an Al model is to:

A. verify the availability of the infrastructure under adverse conditions.
B. validate the accuracy of the model’s outputs across multiple data sets.
C. test the robustness of the model’s predictions under unexpected conditions.
D. identify weaknesses in the model’s ability to resist adversarial inputs.

Correct Answer: D
QUESTION 117
A car insurance company uses an Al model to determine customer premiums. To ensure the ethical use of this model, which of the following testing practices should the company consider to be MOST important?

A. Testing to ensure the model’s predictions do not discriminate based on age or gender
B. Running model performance tests on randomized data to improve the model’s accuracy
C. Deploying the a model only for a small randomly selected group of existing customers
D. Ensuring demographic data is not used to train models outside of the defined use case

Correct Answer: A
QUESTION 118
A banking organization uses Al to support the credit scoring process. Which of the following is the GREATEST benefit of providing interpretations of Al model outputs?

A. It helps auditors identify areas where the Al model may require retraining.
B. It reduces the need for human oversight in the loan approval process.
C. It ensures the outputs align with the organization’s internal ethical standards.
D. It allows stakeholders to understand the reasons behind the outputs.

Correct Answer: D
QUESTION 119
An IS auditor learns that the training data for an Al solution has insufficient representation. Which of the following would be the GREATEST risk in this situation?

A. Underfitting
B. Overfitting
C. Imbalance
D. Clustering Correct Answer: C QUESTION 120

An S auditor uses an Al tool to select a sample from a diverse population and notices presented samples exhibit similar attributes. Which of the following is the BEST course of action to of assure the objectivity of the audit process?

A. Manually select an additional sample from the population without using the Al tool.
B. Accept the sample as valid and proceed with the audit based on prior successful audits using the Al tool.
C. Rerun the sampling process using the Al tool to ensure a more representative sample.
D. Conduct a thorough analysis of the selected sample to identify any biases before making a decision.

Correct Answer: C