QUESTION 141
An IS auditor is participating in a task force to select an Al solution vendor. The vendor states that their product is only functional with web integration activated. Which of the following is the GREATEST concern?

A. Data hallucinations and biases
B. Impacts on employee and contractor workforces
C. Inappropriate algorithms used by the vendor
D. Al training model environment

Correct Answer: D
QUESTION 142
An Al-driven incident management system determines the root cause of a security event by:

A. correlating similar events across multiple systems.
B. automatically applying patches to all systems on the network.
C. reviewing logs and flagging the first system to report anomalous events.
D. flagging previously reported vulnerabilities.

Correct Answer: A
QUESTION 143
A data loss prevention (DLP) system was recently implemented to identify data retention policy compliance. Which of the following would be the BEST use of Al to collect evidence?

A. Apply natural language queries to identify sensitive information.
B. Deploy analytics to identify suspicious data transactions.
C. Redirect workflows through automated monitoring tools.
D. Document blockchain immutability as evidence of data integrity.

Correct Answer: A
QUESTION 144
A financial services company is developing Al models to predict customer credit risk. To reduce privacy nicens, the company decides to train the models primary using synthetic data. Which of the following is an IS auditor’s BEST recommendation to evaluate synthetic data risk?

A. Require validation of synthetic data quality.
B. Conduct cluster analysis using synthetic data.
C. Discontinue the use of synthetic data for model training.
D. Perform regression testing using synthetic data.

Correct Answer: C
QUESTION 145
An IS auditor uses an Al tool to select samples for testing. The Al tool selects transactions based on patterns identified in prior-year financial misstatements. Which of the following is the GREATEST risk associated with this approach?

A. Al-driven selections may prioritize transactions with the largest monetary value.
B. The Al tool may overly weight qualitative characteristics in its scoring model.
C. The Al tool may fail to detect new or emerging risk areas.
D. Sampling based on past errors might reduce overall sample size.

Correct Answer: C
QUESTION 146
A deepfake video is presented as evidence in a court case, falsely implicating an individual in criminal activities. Which of the following is an S auditor’s BEST recommendation to help ensure the authenticity of digital evidence?

A. Training legal and forensic professionals to recognize deepfake characteristics in evidence
B. Storing all digital evidence on secure remote cloud servers and on local servers
C. Employing specialized tools designed to detect deepfake artifacts and inconsistencies
D. Requiring digital watermarks for any evidence presented in legal proceedings

Correct Answer: C
QUESTION 147
Which of the following is the MOST critical factor to consider when relying on an Al tool to generate an audit report based on its review of workpapers?

A. The speed at which the Al tool can generate the report based on the workpapers
B. The ability of the Al tool to integrate with audit software for data transfer
C. The reliability of the Al tool for contextualizing the workpapers
D. The cost-effectiveness of the Al tool compared to traditional manual reporting methods

Correct Answer: C
QUESTION 148
Which of the following BEST improves predictions and understanding to refine the accuracy of Al models?

A. Mean clustering
B. Data augmentation
C. Prompt templates
D. Data compression

Correct Answer: B
QUESTION 149
An IS auditor is planning to audit an Al model for algorithmic bias. Which of the following is the BEST way to test the model?

A. Apply anecdotal evidence assessments.
B. Use balanced model training.
C. Develop Pareto front analysis.
D. Assess the feature disparity index.

Correct Answer: D
QUESTION 150
An organization passes transaction data to an Al system so it can produce recommendations for customers. Which of the following is MosT important for management to do to keep this service reliable?

A. Have insurance coverage to compensate for Al-related litigations.
B. Ensure risk mitigation scenarios reduce exposures to a tolerable range.
C. Obtain independent certification on strategies for business resilience.
D. Be aware of the of social influences of the Al-based services they provide.

Correct Answer: B
QUESTION 151
An IS auditor reviewing an Al-based data governance program discovers that there is no formal data

classification policy in place. Which of the following is the MosT likely consequence of this gap?

A. Unauthorized data sharing with contractors
B. Delayed Al model deployment due to data inefficiencies
C. Inappropriate handling of sensitive data during Al model training
D. Reduced data cleansing accuracy due to lack of categorization

Correct Answer: C
QUESTION 152
An Al generated photo showing a catastrophe circulated on social media, impacting the supply chain. This is an example of which type of risk?

A. Data privacy risk
B. Societal risk
C. Economic risk
D. Compliance risk

Correct Answer: B
QUESTION 153
It was determined that an Al system used for medical diagnoses shows decreased accuracy for minority populations. is Which of the following is the BEST way to address this issue?

A. Retrain the model with more representative data.
B. Apply anonymization techniques to the training data.
C. Transition to exclusively using synthetic data generation.
D. Optimize model hyperparameters for better performance.

Correct Answer: A
QUESTION 154
When auditing an Al model’s change management process, which of the following is MOST crucial to ensure the model’s integrity and compliance?

A. Conducting training sessions for the Al development team on machine learning (ML) techniques
B. Monitoring the Al model’s predictions using different data to detect anomalies
C. Documenting Al model business requirements before deployment
D. Establishing a user feedback mechanism to gather insights on the Al model’s performance

Correct Answer: C
QUESTION 155
Which of the following is the MOST important is key indicator to assess when auditing the deployment of Al in predictive maintenance system in manufacturing operations?

A. Percentage of Al’s predictive algorithms that are compliant with industry standards
B. Frequency of updates to Al predictive models based on equipment usage
C. Total number of predictive maintenance scenarios implemented using Al
D. Reduction in downtime and maintenance costs due to Al use

Correct Answer: D
QUESTION 156
Which of the following is MOST important to have in place before implementing a system that utilizes Al?

A. A project plan for deploying the Al system
B. An Al acceptable use policy

C. Model evaluation and validation methodology
D. Training on the use of the system’s Al capabilities

Correct Answer: C
QUESTION 157
An organization plans to deploy an Al model for real-time fraud detection in financial transactions. Which of the following is the BEST approach to manage risk associated with false negatives?

A. Increase the frequency of manual reviews for flagged transactions.
B. Define clear business requirements for acceptable false negative rates.
C. Train the Al model using previously identified false negatives.
D. Limit the system initially to only real-time and low-value transactions.

Correct Answer: B
QUESTION 158
Three different Al applications identified gender classification errors in classes that have small sample sizes. Which of the following is the MOST likely cause of the errors?

A. Skewed data
B. Anonymized data
C. Unstructured data
D. Private data

Correct Answer: A
QUESTION 159
Which Al model functionality provides an IS auditor with documentation to understand the MOST significant data attributes to model conclusions?

A. Feature importance analysis
B. Data augmentation
C. Correlation matrix
D. Bivariate analysis

Correct Answer: A
QUESTION 160
To ensure stakeholders are adequately prepared to address workforce impacts, which of the following is an IS auditors BEST recommendation for an organization’s Al incident response plan?

A. Verify that the organization has an Al ethics committee to discuss potential workforce impacts.
B. Confirm that all employees have completed a standardized online Al awareness course within the last year.
C. Validate that regular cross-functional Al incident drills and skill gap assessments are performed.
D. Review the frequency of Al security incidents and updates to the response plan.

Correct Answer: C