Free Isaca AAISM Exam Questions

Become Isaca Certified with updated AAISM exam questions and correct answers

Page: 1 / 52

Total 258 Questions | Updated On: Feb 12, 2026

Add To Cart

Question 1

A large financial institution is integrating a third-party AI solution into its fraud detection system. Which is the BEST way to reduce AI vendor/supply chain risk?

A : Conduct annual vulnerability assessments after integration

B : Establish contractual agreements requiring evidence of secure development practices

C : Use isolated virtual environments to validate integration

D : Focus on performance testing

Answer: B

Question 2

An organization has implemented a natural language processing model to respond to customer questions when personnel are not available. A pre-implementation security assessment revealed attackers could access sensitive company data through a chat interface injection attack. Which of the following is the BEST way to prevent this attack?

A : Ensuring continuous monitoring and data tagging

B : Manually reviewing AI model outputs

C : Implementing input validation and templates

D : Conducting regular information security audits

Answer: C

Question 3

An organization is implementing AI agent development across multiple engineering teams. Which of the following is the MOST important focus of AI-specific security training for developers?

A : Prompt injection, agent memory control, and insecure tool execution

B : Dataset bias, explainability, and fairness in model decisions

C : Output moderation, hallucination handling, and policy alignment

D : API abuse, data leakage, and third-party plug-in risk

Answer: A

Question 4

Who is responsible for implementing recommendations in a final report after an external AI compliance audit?

A : System architects

B : End users

C : Internal auditors

D : Model owners

Answer: D

Question 5

Which of the following MOST effectively minimizes the attack surface when securing AI agent components during their development and deployment?

A : Deploy pre-trained models directly into production.

B : Consolidate event logs for correlation and centralized analysis.

C : Schedule periodic manual code reviews.

D : Implement compartmentalization with least privilege enforcement.

Answer: D

Page: 1 / 52

Total 258 Questions | Updated On: Feb 12, 2026

Add To Cart