AAIA Exam Dumps - Isaca Advanced in AI Audit Questions and Answers

Imputing missing values using the mean, median, or mode is a common technique to fill blanks in datasets. However, according to the AAIA™ Study Guide, this method introduces a significant risk of information distortion, especially if the data is not normally distributed or if imputed values disproportionately impact underrepresented groups.

“Simple imputation can reduce data variability and reinforce existing biases. It may also misrepresent the true distribution of the data, leading to skewed model outputs.”

Other options (B, C, D) may involve transformations, but they do not inherently cause as much bias or data misrepresentation as A.

The most effective strategy to protect sensitive patient data is to use synthetic data or anonymized datasets for model training. This reduces exposure of personally identifiable information while allowing the model to learn meaningful medical patterns.

AAIA emphasizes privacy-by-design, de-identification, and minimal use of raw personal data in high-risk sectors such as healthcare. Anonymization and synthetic data significantly reduce the risk of re-identification or breach-related harm.

Option A (encryption) protects data in transit but does not eliminate privacy risks. Option B is impractical because healthcare models require clinically relevant datasets, not public data. Option C increases data exposure, aggravating privacy risks.

Thus, using anonymized or synthetic data is the strongest privacy protection aligned with healthcare compliance principles.

Ensuring AI model resilience against external threats involves validating that the model is configured to resist attacks, such as adversarial inputs, data poisoning, or misuse. The AAIA™ Study Guide emphasizes configuration testing as a crucial control to simulate threat scenarios and assess robustness.

“Model configuration testing simulates real-world threat conditions to validate model resilience. This includes testing against adversarial attacks, input manipulation, and exposure of sensitive outputs.”

While access monitoring (C) and anonymization (A) reduce risks, they don’t actively validate model behavior under threat conditions. Therefore, D offers the most effective resilience measure.

Transparency is a foundational principle for AI governance and effective risk management. When evaluating AI systems, IS auditors must assess not just how an algorithm functions, but also whether its processes and decisions are understandable and explainable. According to the ISACA Advanced in AI Audit™ (AAIA™) Study Guide, "algorithmic transparency—enabling auditors and stakeholders to see and understand the rationale behind automated decisions—is essential for ensuring accountability, fairness, and compliance with both organizational policies and regulatory requirements."

Transparent justification of decisions (option C) directly supports an auditor’s ability to evaluate the appropriateness, logic, and fairness of the AI’s outputs. This is critical in identifying bias, ensuring ethical considerations are met, and verifying that outcomes are consistent with intended objectives. Without transparent justification, it is difficult for an IS auditor to independently assess whether decisions are being made based on valid, legal, and ethical grounds.

By contrast, options A, B, and D are either standard operational aspects or supportive features, but they do not directly empower auditors to evaluate or scrutinize the algorithm’s decision-making process. The Study Guide explicitly highlights, “Effective AI governance frameworks require that systems provide clear, interpretable explanations for their decisions, supporting auditability and accountability across the AI lifecycle.”