Isaca AAISM Exam Questions Instant Access

Question 1

Which approach should an organization prioritize to effectively verify the security of its AI models?

AAutomating vulnerability identification

BDeveloping a testing strategy including AI-specific threat modeling and adversarial attack simulations

CTesting team competencies in IT threat mitigation

DUsing standard penetration testing methods

Answer : B

The AAISM standard explicitly states that traditional penetration tests alone are insufficient for AI systems. Effective AI security testing requires:

* AI-specific threat modeling (e.g., data poisoning, prompt injection, model theft)

* Adversarial attack simulations (white-box, black-box, gradient-based attacks)

* Evaluation of robustness and manipulation resistance

Option B captures these requirements precisely.

Options A, C, and D do not address AI-specific attack vectors.

=============================================

Question 2

An AI research team is developing a natural language processing model that relies on several open-source libraries. Which of the following is the team's BEST course of action to ensure the integrity of the software packages used?

AMaintain a list of frequently used libraries to ensure consistent application in projects

BScan the packages and libraries for malware prior to installation

CUse the latest version of all libraries from public repositories

DRetrain the model regularly to handle package and library updates

Answer : B

AAISM's technical control guidance emphasizes that when using open-source libraries, the best safeguard for integrity is to scan the packages for malware before installation. This ensures that compromised or malicious code does not enter the AI system environment. Maintaining lists aids consistency but not security. Always using the latest versions may introduce unverified vulnerabilities. Retraining models addresses functionality but not software integrity. Therefore, the strongest protective measure is pre-installation malware scanning of open-source packages.

AAISM Exam Content Outline -- AI Technologies and Controls (Software Supply Chain Security)

AI Security Management Study Guide -- Open-Source Package Risk Mitigation

Question 3

When preparing for an AI incident, which of the following should be done FIRST?

AImplement a communication channel to report AI incidents

BEstablish a cross-functional incident response team with AI knowledge

CEstablish recovery processes for AI system models and data sets

DCreate containment and eradication procedures for AI-related incidents

Answer : B

AAISM incident response guidance states the first foundational step is forming a cross-functional AI-aware incident response team, including model developers, data stewards, security leads, and compliance officers. Without the team established, recovery (C), containment (D), or communication channels (A) cannot be effectively designed or executed.

============================================

Question 4

Which phase of the AI data life cycle presents the GREATEST inherent risk?

AMonitoring

BMaintenance

CPreparation

DTraining

Answer : D

AAISM identifies training as the phase with the highest inherent risk because this is where:

* data poisoning can occur

* sensitive data may be exposed

* bias can be introduced

* model inversion risks originate

* security and privacy vulnerabilities are embedded

Preparation (C) carries risk but is less critical. Maintenance (B) and monitoring (A) involve operational safeguards, not foundational risk creation.

============================================

Question 5

Within an incident handling process, which of the following would BEST help restore end user trust with an AI system?

AThe AI model prioritizes incidents based on business impact

BAI is being used to monitor incident detection and alerts

CThe AI model's outputs are validated by team members

DRemediation of the AI system based on lessons learned

Answer : C

Restoring end user trust during incident handling requires visible, immediate assurance that system outcomes are safe and appropriate. AAISM prescribes human oversight and approval gates for high-risk AI decisions, with human validation of outputs before use as a primary control to maintain trust while technical remediation is underway. Prioritization (A) and monitoring (B) aid operations but do not directly rebuild user confidence in outcomes. Post-incident improvements (D) are essential for long-term assurance but do not provide the immediate trust restoration that supervised, human-validated outputs deliver.

===========

Question 6

Which defense is MOST effective against cyberattacks that alter input data to avoid detection?

AEnhancing model robustness through adversarial training

BRestricting access to internal model parameters

CConducting periodic monitoring of decisions

DApplying differential privacy to training data

Answer : A

AAISM lists adversarial training as the strongest method to harden models against input manipulation attacks. By exposing models to adversarial examples during training, the system learns to resist evasion techniques.

Access restriction (B) protects confidentiality, not detection evasion. Monitoring (C) is reactive, not preventive. Differential privacy (D) protects individual data, not adversarial inputs.

============================================

Question 7

An attacker crafts inputs to a large language model (LLM) to exploit output integrity controls. Which of the following types of attacks is this an example of?

APrompt injection

BJailbreaking

CRemote code execution

DEvasion

Answer : A

According to the AAISM framework, prompt injection is the act of deliberately crafting malicious or manipulative inputs to override, bypass, or exploit the model's intended controls. In this case, the attacker is targeting the integrity of the model's outputs by exploiting weaknesses in how it interprets and processes prompts. Jailbreaking is a subtype of prompt injection specifically designed to override safety restrictions, while evasion attacks target classification boundaries in other ML contexts, and remote code execution refers to system-level exploitation outside of the AI inference context. The most accurate classification of this attack is prompt injection.

AAISM Exam Content Outline -- AI Technologies and Controls (Prompt Security and Input Manipulation)

AI Security Management Study Guide -- Threats to Output Integrity

Isaca Advanced in AI Security Management AAISM Exam Questions