AAIR 시험 - ISACA실제시험문제와 답 - 90문항

Question No : 1

An organization has deployed an AI system that initially performs well but whose outputs deteriorate over time despite stable input characteristics.
Which of the following is the BEST course of action?

A.Engage periodic external audits of model source code and implement peer code reviews.
B.Replace the system's predictive capability with static rule-based controls and fixed decision logic.
C.Focus efforts on dataset cleansing and documentation prior to further system updates.
D.Establish continuous performance monitoring and scheduled system recalibration.

정답:

Question No : 2

An organization has deployed generative AI tools broadly but lacks a consistent method to refresh governance policies and controls.
Which of the following is the risk practitioner's BEST recommendation?

A.Establish an ongoing review cadence and codify procedures for reassessment.
B.Implement systematic updates and emphasize alignment with emerging regulatory expectations.
C.Centralize decision making and concentrate authority within executive leadership and technical owners.
D.Schedule annual compliance reviews and integrate audit findings into revision planning.

정답:

Question No : 3

An organization has developed an AI code of conduct outlining ethical use, data privacy, and transparency principles.
Which of the following is the BEST approach to integrate the code of conduct into workforce training?

A.Incorporate the code of conduct into onboarding modules for new personnel.
B.Engage external providers to deliver learning content with periodic updates.
C.Provide role-tailored education supplemented by scheduled refreshers.
D.Focus the training curriculum on compliance with AI-specific laws and regulations.

정답:

Question No : 4

An organization embeds AI into existing processes without integrating AI risk practices into enterprise governance.
Which of the following should a risk practitioner regard as the GREATEST organizational risk?

A.Inadequate regulatory compliance documentation
B.Overly technical focus that is not aligned with business goals
C.Unclear ownership leading to divergent controls and conflicting objectives
D.Difficulty in obtaining business executive approval for AI innovation initiatives

정답:

Question No : 5

Which of the following is the PRIMARY benefit of incorporating new AI-specific controls?

A.It identifies and prioritizes compliance reporting requirements that apply to both existing and new controls.
B.It reduces costs by eliminating redundant controls and consolidating control oversight.
C.It provides a holistic approach to address conventional governance exposures and emerging AI vulnerabilities.
D.It accelerates deployment timelines by enabling more efficient pre-deployment risk analysis.

정답:

Question No : 6

Which of the following poses the GREATEST challenge related to the protection of intellectual property generated by AI solutions?

A.Use of third-party AI service providers that have zero-data retention policies
B.Difficulty in customizing training materials for users on confidential data handling in AI environments
C.Lack of regulatory clarity regarding the copyright status of AI-generated content
D.Inherent risk in fundamental AI use cases such as general inquiries or administrative tasks

정답:

Question No : 7

Which of the following is the PRIMARY benefit of tailoring AI governance to an organization’s culture and risk tolerance?

A.Improved AI model explainability and regulatory compliance
B.Higher stakeholder acceptance rates and more appropriate AI risk policies
C.Automation of risk assessment processes and clearer AI risk accountability
D.Enhanced AI training programs and staff reskilling initiatives

정답:

Question No : 8

Which of the following is the GREATEST risk when an organization lacks clearly defined accountability mechanisms for AI outputs and decisions?

A.Intellectual property exposure
B.Ineffective model training
C.Reduced availability
D.Legal liability

정답:

Question No : 9

Which of the following BEST helps to ensure adherence to data minimization principles when using an AI model whose training dataset contains personal information?

A.Data loss prevention (DLP)
B.Role-based access control (RBAC)
C.Data encryption
D.Pseudonymization

정답:

Question No : 10

Which of the following is the BEST way to integrate AI risk management into operational procedures?

A.Require organization-wide training on AI legal and regulatory requirements.
B.Engage regular third-party audits of AI process and workflow documentation.
C.Introduce AI risk assessment stages throughout the development and deployment process.
D.Require AI risk committee approval for changes involving automation of manual tasks.

정답:

Question No : 11

An organization plans to procure an AI model from a third-party supplier for a critical business function.
Which of the following is MOST important to evaluate during supplier vetting?

A.Alignment with specific use cases
B.Size of model training datasets
C.Industry-recognized certifications
D.Emphasis on innovative solutions

정답:

Question No : 12

Which of the following is the BEST governance approach for balancing risk management and operational flexibility across diverse AI applications?

A.Control approaches for AI solutions that prioritize compliance on a single regulation
B.Frameworks that can be adapted to business-relevant AI use cases
C.External consultants who conduct independent AI governance reviews
D.Risk ownership processes that focus on ensuring centralized decision-making

정답:

Question No : 13

Which of the following is MOST important when defining responsible roles for integrating third-party AI services into an organization’s supply chain?

A.Designating AI governance and risk ownership
B.Standardizing migration and data transfer protocols
C.Mandating cross-functional AI training for third-party staff
D.Aligning organizational and third-party AI security policies

정답:

Question No : 14

An organization deploys an autonomous system that makes decisions affecting compliance with regulations. If those decisions could potentially produce regulatory breaches, which of the following BEST helps to manage associated liability exposures?

A.Creating a separate compliance program for AI obligations and maintaining distinct reporting channels
B.Retaining documentation that provides explainability for decisions and embedding controls in oversight processes
C.Restricting AI deployment to use cases with lower impact and delaying broader operational integration
D.Routing escalations through a single point of contact and prohibiting disclosure of proprietary information

정답:

Question No : 15

Which of the following is the GREATEST concern when an organization cannot clearly explain an AI system's decision-making process and the origin of its inputs?

A.Increased dependence on external AI service providers for managing AI system risk throughout its life cycle
B.Decrease in AI adoption rates within business units who are regularly responsible for critical decisions
C.Inability to detect discriminatory or inaccurate outputs that expose the organization to regulatory and reputational risk
D.Heightened reliance on manual review resulting in approval bottlenecks and slower response times

정답:

ISACA AAIR 시험