Isaca Advanced in AI Risk AAIR Exam Questions

Answer : C

AI systems introduce new categories of risk---model drift, adversarial attacks, algorithmic bias, hallucination---that conventional IT controls were not designed to address. AI-specific controls must complement existing controls to create comprehensive coverage across both traditional and emerging risk domains.

Why C is Correct: The ISACA AAIR curriculum identifies the holistic, comprehensive coverage of both conventional governance exposures and emerging AI vulnerabilities as the primary benefit of AI-specific controls. By designing controls that address AI-unique risks while integrating with existing governance structures, organizations achieve end-to-end risk management without creating coverage gaps between the old and new control environments.

Why A is Wrong: Compliance reporting prioritization is a governance administration activity. While AI-specific controls may clarify compliance requirements, identifying and prioritizing reporting requirements is not the primary purpose of implementing new controls.

Why B is Wrong: Cost reduction through control consolidation is an efficiency benefit that may result from control rationalization but is not the primary benefit of incorporating AI-specific controls. Adding necessary controls may actually increase costs in the short term.

Why D is Wrong: Accelerating deployment through efficient pre-deployment analysis is an operational efficiency benefit. The primary governance purpose of AI-specific controls is comprehensive risk coverage, not deployment speed.

Answer : A

Privacy and data protection regulations worldwide---including GDPR, CCPA, and sector-specific laws---impose strict requirements on the collection, use, and processing of personal information. Customer data used for AI systems must be obtained through lawful means with appropriate consent for the specific processing purpose.

Why A is Correct: According to ISACA AAIR guidance on regulatory compliance, the legal basis for processing personal data is the foundational requirement. An AI system built on data collected without proper consent or legal authorization exposes the organization to regulatory penalties, reputational damage, and forced shutdown of the system. Consent must be specific to the AI use case, not merely generic data collection consent.

Why B is Wrong: Backup and storage protocols address data security and resilience, which are compliance requirements but secondary to the lawfulness of data collection. Securely storing improperly obtained data does not cure the regulatory violation.

Why C is Wrong: Human review of recommendations is a governance safeguard for accuracy and fairness, not a regulatory compliance requirement for data collection. Many regulations do not require human review of recommendation systems.

Why D is Wrong: Supervised learning is a modeling technique that does not address regulatory compliance regarding data sourcing. The training methodology is irrelevant to whether the underlying data was legally obtained.

Answer : D

Chatbot accuracy in customer service depends on correctly identifying customer intent and generating appropriate responses. Both intent classification accuracy and training data quality directly determine chatbot performance over time.

Why D is Correct: According to ISACA AAIR model performance management guidance, measuring intent-classification error rates provides precise diagnostic information about where the chatbot misunderstands customer inquiries, while refining training datasets based on those errors continuously improves classification accuracy. This closed-loop approach---measure specific errors, improve the underlying data that drives them---is the most effective mechanism for sustained high accuracy.

Why A is Wrong: Increasing model temperature increases output randomness and diversity, which is counterproductive for accuracy in customer service contexts where consistent, precise answers are required. Precision and recall provide useful metrics but increased temperature actively undermines accuracy.

Why B is Wrong: Vendor benchmarking compares performance against generic standards. Customer service chatbots must be optimized for the specific organization's terminology, products, and customer base---generic thresholds may not capture the accuracy requirements of a specific deployment.

Why C is Wrong: Explainable AI techniques improve decision transparency but do not directly enhance classification accuracy. Code reviews address software quality, not the model's ability to accurately interpret customer intent.

Answer : A

Risk ratings must be maintained as current assessments of organizational risk exposure. Events that materially change the risk profile---particularly those indicating active harm or regulatory violations---require immediate risk rating updates to ensure governance responses are calibrated to the current risk reality.

Why A is Correct: According to ISACA AAIR risk monitoring and review guidance, the discovery of discriminatory outputs from an AI system represents a material change in risk exposure that requires immediate risk rating updates. Discriminatory outputs indicate active harm to individuals, regulatory violations, and significant legal and reputational exposure. This event fundamentally changes the risk profile from a potential to an actual harm, requiring escalated risk ratings and treatment responses.

Why B is Wrong: Adding new monitoring metrics improves risk detection capability but does not change the underlying risk levels. New metrics may subsequently detect risks requiring rating updates, but their addition alone is an operational change, not a risk level change.

Why C is Wrong: Vulnerability patch deployment reduces risk by closing specific security gaps, which may lower risk ratings but is less urgent than updating ratings to reflect active harm discovery. Patching is a remediation activity; discriminatory outputs represent ongoing harm requiring immediate escalation.

Why D is Wrong: Creating an oversight committee improves governance capability but does not change the risk profile of AI systems. Governance structure changes affect the organization's ability to manage risk; they do not affect the risk levels themselves.

Answer : A

Root cause analysis for AI incidents requires the ability to trace system behavior back through decision logic, data processing steps, and model internals to identify what caused the incident. AI systems---particularly deep learning models---often operate as black boxes, making this tracing extremely difficult.

Why A is Correct: According to ISACA AAIR incident management guidance, the lack of transparency in AI systems is the greatest root cause analysis challenge. When decision logic cannot be inspected, when data lineage is unclear, or when model internals are opaque, analysts cannot determine why the system behaved as it did. This transparency deficit prevents accurate root cause identification, perpetuates recurrence, and makes it impossible to demonstrate corrective action to regulators.

Why B is Wrong: Unclear system objectives represent a design and governance problem that should be addressed before deployment. While unclear objectives can contribute to incidents, they are typically knowable and addressable. Lack of transparency during an incident is a more immediate analytical barrier.

Why C is Wrong: Automation bias---the tendency to over-trust automated systems---is a human factors risk that affects decision-making during normal operations. While it may contribute to incidents, it is a behavioral phenomenon rather than the primary technical barrier to root cause analysis.

Why D is Wrong: Privacy compliance requirements may restrict access to certain data needed for analysis, creating constraints on investigation. However, these are governance constraints that can often be addressed through appropriate authorization, not fundamental analytical barriers.

Answer : A

When required safeguards cannot be technically implemented, the risk they were designed to mitigate remains unaddressed. This creates a residual exposure gap where the AI system operates with known, unmitigated vulnerabilities---a fundamental risk management failure for the identified threat.

Why A is Correct: The ISACA AAIR risk treatment guidance identifies elevated residual exposure from absent controls as the greatest risk when required safeguards cannot be implemented. Every required safeguard addresses a specific risk exposure. When that safeguard is technically infeasible, the risk it was designed to prevent remains fully present. This unmitigated exposure may exceed the organization's risk tolerance and require escalation to senior management for risk acceptance or alternative treatment decisions.

Why B is Wrong: Training dataset restrictions relate to model development constraints, not directly to the inability to implement a specific runtime safeguard. This is a separate concern that may arise in some technical constraint scenarios but is not the primary risk of an absent safeguard.

Why C is Wrong: User experience degradation is an operational quality concern. Performance impacts from technical constraints are a usability issue rather than a risk exposure representing the greatest organizational concern.

Why D is Wrong: Operational inefficiency and manual process dependencies are resource and process concerns. While relevant to operational cost and effectiveness, they do not represent the primary risk of an unmitigated security or safety exposure from an absent safeguard.

Answer : B

An enterprise AI governance dashboard must provide decision-makers with a comprehensive, integrated view of AI program health across all dimensions---risk, performance, compliance, ethics, and operations. Fragmenting this view or focusing on narrow metrics produces an incomplete governance picture.

Why B is Correct: The ISACA AAIR governance reporting guidance recommends aggregating diverse metrics from all AI life cycle stages as the best approach for an enterprise governance dashboard. This comprehensive aggregation enables decision-makers to see the full AI risk and performance picture---from data quality in training through deployment performance, bias monitoring, security incidents, and compliance status---in a single, actionable view. This unified perspective supports informed enterprise-level governance decisions.

Why A is Wrong: Uptime and availability metrics are operational infrastructure indicators that represent only one dimension of AI governance. Focusing primarily on availability misses critical governance concerns including model fairness, accuracy, bias, and ethical compliance.

Why C is Wrong: Risk heat maps based solely on training variance are narrow technical performance indicators. A governance dashboard requires breadth across risk types and life cycle stages, not depth on one specific technical metric.

Why D is Wrong: Assigning dashboard responsibility exclusively to IT centralizes governance reporting in one function that may lack visibility into business risk, ethical compliance, and strategic alignment dimensions of AI governance. Enterprise dashboards require cross-functional input and ownership.