ISACA Advanced in AI Risk Sample Questions:

1. A risk practitioner is assessing risk in a newly implemented AI system integrated into an organization's business processes. Which of the following is the MOST important consideration for the risk practitioner?

A) Escalation and approval protocols for AI mitigation measures
B) Level of existing business process automation prior to AI adoption
C) Criticality and impact of decision-making driven by the AI system
D) AI expertise within the organization's risk management function

2. Which of the following is the MOST appropriate key performance indicator (KPI) for the effectiveness of a targeted AI risk awareness training program?

A) Changes in risk ratings for risk scenarios involving awareness of insider threats
B) Percentage of users who can identify the financial impact of AI outcomes
C) Number of AI irregularities or potential tampering incidents reported by users
D) AI solution adoption rates among business units whose employees have taken training

3. An organization is integrating AI systems into core business operations and has decided to establish a formal process to align AI initiatives with corporate values. Which of the following is the GREATEST benefit of this decision?

A) Ethical principles can be added to AI development and usage after deployment.
B) Return on investment (ROI) for new AI services can be evaluated more accurately.
C) Executive support for technical training and upskilling related to AI can be more effectively obtained.
D) The transparency and explainability of AI model decisions is enhanced for all stakeholder groups.

4. An organization plans to deploy a generative AI system that processes sensitive personal data across multiple countries with varying privacy laws. Which of the following is the BEST course of action to manage legal and regulatory exposure?

A) Tailor organizational controls to relevant statutory requirements and preserve audit trails to prove adherence.
B) Prioritize protection of intellectual property and restrict disclosure of model operations to safeguard assets.
C) Adopt uniform global policies and implement strong encryption of personal data for all cross-border transfers.
D) Remediate regulatory gaps in each jurisdiction through iterative post-deployment updates and model retraining.

5. Which of the following BEST enables an organization adopting AI solutions to foster an ethical and risk- aware culture?

A) Senior management representatives actively participate in industry conferences related to AI ethics.
B) Leadership consistently models ethical behavior and values for AI development and use.
C) All business units use checklists to ensure AI risk and ethical concerns are addressed.
D) AI policies include clear disciplinary actions for violations of risk and ethical standards.

Solutions: