Official Bank 0/255

ISACA Advanced in AI Security Management (AAISM) (AAISM Exam) - Isaca Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
255 Total Questions
1
Question
Which of the following is the BEST control for preventing deepfakes?
Options
A Regular AI risk assessment
B AI governance policies
C Output provenance verification
D System input validation
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
An organization is planning to commission a third-party AI system to make decisions using sensitive data. Which of the following metrics is MOST important for the organization to consider?
Options
A Service availability
B Accessibility rating
C Model response time
D Accuracy thresholds
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
An organization is implementing AI agent development across multiple engineering teams. Which of the following is the MOST important focus of AI-specific security training for developers?
Options
A Dataset bias, explainability, and fairness in model decisions
B Output moderation, hallucination handling, and policy alignment
C Prompt injection, agent memory control, and insecure tool execution
D API abuse, data leakage, and third-party plug-in risk
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Which of the following is the BEST way to ensure an organization remains compliant with industry regulations when decommissioning an AI system used to record patient data?
Options
A Perform a post-destruction risk assessment to verify that there is no residual exposure of data
B Update governance policies based on lessons learned and ensure a feedback loop exists
C Ensure backups are tested and access controls are recorded and audited to ensure compliance
D Ensure the certificate of destruction is received and archived in line with data retention policies
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
An organization decides to contract a vendor to implement a new set of AI libraries. Which of the following is MOST important to address in the master service agreement to protect data used during the AI training process?
Options
A Continuous data monitoring
B Data pseudonymization
C Independent certification
D Right to audit
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.