Question 1

Which of the following is MOST important for an organization to consider when implementing a preventive security safeguard into a new AI product?

Options :

A : Input sanitization

B : Model output monitoring

C : Penetration testing

D : Differential privacy

Answer: A

Question 2

An organization is facing a deepfake attack intended to manipulate stock prices. The organization’s crisis communication plan has been activated. Which of the following is MOST important to include in the initial response?

Options :

A : Conduct employee awareness training on recognizing deepfake videos and audio

B : Provide clarifying information in a pre-approved public statement

C : Conduct a detailed forensic analysis to identify the source of the deepfake

D : Engage with brand monitoring services to track social media activity

Answer: B

Question 3

As organizations increasingly rely on vendors to develop AI systems, which of the following is the MOST effective way to monitor vendors and ensure compliance with ethical and security standards?

Options :

A : Conducting regular audits of vendor processes and adherence to AI development guidelines

B : Requiring vendors to monitor their adherence to ethics and security standards

C : Mandating that vendors share source code and AI documentation with the contracting party

D : Allowing vendors to self-attest ethical AI compliance and implement benchmark monitoring

Answer: A

Question 4

Which of the following recommendations would BEST help a service provider mitigate the risk of lawsuits arising from generative AI’s access to and use of internet data?

Options :

A : Activate filtering logic to exclude intellectual property flags

B : Disclose service provider policies to declare compliance with regulations

C : Appoint a data steward specialized in AI to strengthen security governance

D : Review log information that records how data was collected

Answer: A

Question 5

Which of the following information is MOST important to include in a centralized AI inventory?

Options :

A : Ownership and accountability of AI systems

B : AI model use cases

C : Training data sets

D : Foundation model and package registry

Answer: A