AAIR Exam Dumps - Isaca AI Risk Questions and Answers

Chatbot accuracy in customer service depends on correctly identifying customer intent and generating appropriate responses. Both intent classification accuracy and training data quality directly determine chatbot performance over time.

Why D is Correct: According to ISACA AAIR model performance management guidance, measuring intent-classification error rates provides precise diagnostic information about where the chatbot misunderstands customer inquiries, while refining training datasets based on those errors continuously improves classification accuracy. This closed-loop approach—measure specific errors, improve the underlying data that drives them—is the most effective mechanism for sustained high accuracy.

Why A is Wrong: Increasing model temperature increases output randomness and diversity, which is counterproductive for accuracy in customer service contexts where consistent, precise answers are required. Precision and recall provide useful metrics but increased temperature actively undermines accuracy.

Why B is Wrong: Vendor benchmarking compares performance against generic standards. Customer service chatbots must be optimized for the specific organization ' s terminology, products, and customer base—generic thresholds may not capture the accuracy requirements of a specific deployment.

Why C is Wrong: Explainable AI techniques improve decision transparency but do not directly enhance classification accuracy. Code reviews address software quality, not the model ' s ability to accurately interpret customer intent.

Within the ISACA Advanced in AI Risk framework, program management connects risk identification, control selection, treatment, monitoring, resilience, third-party oversight, and reporting to enterprise risk objectives. Once controls are mapped to AI risks, a control gap assessment determines whether existing measures are sufficient and identifies the difference between current and required control states. Performance targets or automatic upgrades should not precede that assessment. This makes option C, Perform a control gap assessment between current and desired AI control environments, the strongest answer. The other choices describe narrower technical, operational, performance, or administrative considerations and do not address the primary risk-management objective in the scenario as directly. A risk practitioner should select the response that most effectively reduces the stated exposure while preserving appropriate oversight, traceability, and alignment with organizational risk tolerance and business requirements.

Even when an AI system is initially assessed as within risk tolerance, its risk profile evolves as the system encounters new data, the operational environment changes, and model performance drifts. Controls that were effective at deployment may become insufficient as these changes accumulate.

Why C is Correct: The ISACA AAIR operational monitoring guidance identifies continuous monitoring for data and performance drift as the most important mechanism for maintaining control effectiveness over time. Drift detection provides early warning when the AI system begins behaving differently from its validated state—enabling timely control adjustments before risk tolerance is breached. This is particularly critical because AI systems can degrade gradually in ways not visible without active monitoring.

Why A is Wrong: Framework alignment establishes the control baseline but does not actively verify that controls remain effective as the system evolves. Frameworks provide structure; monitoring provides assurance.

Why B is Wrong: Security and risk awareness training is an important human capability development activity but does not detect technical changes in AI system behavior. Training does not substitute for technical monitoring.

Why D is Wrong: Periodic compliance reviews occur at scheduled intervals and may miss drift that develops between review cycles. Continuous monitoring provides real-time detection that periodic reviews cannot match.

Threat actor profiling characterizes the motivations, capabilities, and likely attack methods of potential adversaries. In AI risk management, understanding who the likely attackers are and what they seek enables the design of controls specifically matched to the actual threat landscape.

Why B is Correct: According to ISACA AAIR threat-based risk management guidance, the most important reason for threat actor profiling is to tailor controls to adversary motivations and capabilities. Different threat actors—nation-state attackers, criminal organizations, competitors, insiders, activists—have different objectives (espionage vs. financial gain vs. disruption), capabilities (sophisticated vs. opportunistic), and methods. Controls calibrated to actual threat actor profiles are significantly more effective than generic controls that may not address the specific threats the organization actually faces.

Why A is Wrong: Aligning AI threats with IT control taxonomy is a governance integration activity that improves control consistency but does not capture the threat actor-specific tailoring value of profiling. Taxonomy alignment is an administrative benefit; threat-tailored controls are a security effectiveness benefit.

Why C is Wrong: Response metrics for cybersecurity incidents are developed for incident management planning. Threat actor profiling informs control design and incident response strategies but is not primarily used to develop response metrics.

Why D is Wrong: Prioritizing external threats over internal threats is a security strategy choice that threat actor profiling does not prescribe. Many AI attacks, including insider threats and social engineering, are internal. Profiling should result in appropriate prioritization based on actual threat likelihood, not a blanket prioritization of external threats.

Autonomous agents creating HR system identities that exist outside the organization ' s federated identity management system create invisible, unmanaged access pathways. These shadow identities bypass the centralized access governance controls designed to enforce least privilege, monitor access activity, and enable rapid deprovisioning.

Why D is Correct: According to ISACA AAIR identity and access management guidance for autonomous AI systems, identities not incorporated into the federated system pose the greatest risk because they are invisible to access governance processes. Federated identity management provides centralized provisioning, deprovisioning, monitoring, and policy enforcement. Autonomous identities outside this system can accumulate inappropriate access rights, persist after their legitimate purpose expires, and be used for unauthorized actions—entirely outside the organization ' s visibility.

Why A is Wrong: Breach identification delays are a consequence of the visibility gap created by ungoverned identities, not the root risk. The primary risk is the existence of invisible access pathways; delayed detection is a downstream effect.

Why B is Wrong: Ineffective credential management is a specific implementation problem with known credentials. The greater risk here is identities that the credential management system doesn ' t know about at all—complete invisibility is worse than imperfect management.

Why C is Wrong: Increased staffing for human validation is an operational resource impact. While relevant to managing autonomous agent oversight, staffing requirements are a manageable operational concern, not the greatest governance risk from ungoverned identities.

Different AI model architectures are optimized for different tasks. Content creation requires a model that can generate novel outputs—text, images, audio, or code—rather than classify, cluster, or optimize decisions based on rules or rewards.

Why A is Correct: According to ISACA AAIR AI technology selection guidance, generative models are specifically designed to synthesize new content by learning the underlying probability distributions of training data. They can produce novel, contextually appropriate outputs—exactly what content creation requires. Large language models (LLMs), diffusion models, and GANs are generative architectures designed for this purpose.

Why B is Wrong: Unsupervised clustering groups existing data points by similarity but does not generate new content. It is used for pattern discovery and segmentation, not creative output generation.

Why C is Wrong: Rule-based expert systems execute predefined logic trees and cannot produce novel content beyond the rules explicitly encoded. They are rigid, deterministic systems unsuitable for open-ended content creation.

Why D is Wrong: Reinforcement learning optimizes decision sequences to maximize cumulative rewards. It is suited for sequential decision-making tasks (games, robotics, recommendation systems) but is not the appropriate architecture for direct content generation.

Output deterioration despite stable inputs is a classic indicator of model drift—specifically concept drift, where the underlying relationships between inputs and targets change over time even when the distribution of inputs appears stable. This requires ongoing monitoring and systematic recalibration.

Why D is Correct: The ISACA AAIR life cycle management guidance identifies continuous performance monitoring and scheduled recalibration as the appropriate response to model drift. Monitoring provides early warning when performance degrades below thresholds, while scheduled recalibration ensures the model is periodically updated to reflect current real-world patterns. This systematic approach prevents continued deterioration and maintains model reliability.

Why A is Wrong: Source code audits and peer reviews address development quality and code integrity, not model drift. Drift is a statistical phenomenon driven by changing data relationships, not code defects that code reviews can identify.

Why B is Wrong: Replacing predictive AI with static rule-based systems eliminates the adaptive capabilities that make AI valuable. Static rules cannot respond to evolving patterns and typically perform worse in dynamic environments.

Why C is Wrong: Dataset cleansing addresses data quality for model retraining but does not establish the ongoing monitoring mechanism needed to detect future drift. A one-time cleansing activity cannot prevent recurrent deterioration.

Within the ISACA Advanced in AI Risk framework, governance decisions should align AI use with policy, accountability, stakeholder expectations, risk appetite, and applicable legal or ethical obligations. Deepfakes can fabricate convincing audio, images, or video at scale and therefore create a major societal risk of misinformation, manipulation, and erosion of public trust. IP or privacy harms can occur, but misinformation is the broadest societal exposure. This makes option C, Widespread misinformation, the strongest answer. The other choices describe narrower technical, operational, performance, or administrative considerations and do not address the primary risk-management objective in the scenario as directly. A risk practitioner should select the response that most effectively reduces the stated exposure while preserving appropriate oversight, traceability, and alignment with organizational risk tolerance and business requirements.

Within the ISACA Advanced in AI Risk framework, program management connects risk identification, control selection, treatment, monitoring, resilience, third-party oversight, and reporting to enterprise risk objectives. AI assists risk scenario identification primarily through rapid analysis and pattern recognition across large volumes of information. Simulation and scoring are downstream capabilities, while pattern detection expands the practitioner ' s ability to identify emerging scenarios. This makes option C, Improved real-time analysis and pattern recognition, the strongest answer. The other choices describe narrower technical, operational, performance, or administrative considerations and do not address the primary risk-management objective in the scenario as directly. A risk practitioner should select the response that most effectively reduces the stated exposure while preserving appropriate oversight, traceability, and alignment with organizational risk tolerance and business requirements.

Within the ISACA Advanced in AI Risk framework, governance decisions should align AI use with policy, accountability, stakeholder expectations, risk appetite, and applicable legal or ethical obligations. AI risk should be explicitly included in enterprise risk appetite and tolerance so use cases are judged against approved business boundaries. A risk register and data controls are useful, but appetite and tolerance connect treatment decisions directly to business objectives. This makes option D, Include AI in risk appetite and tolerance, the strongest answer. The other choices describe narrower technical, operational, performance, or administrative considerations and do not address the primary risk-management objective in the scenario as directly. A risk practitioner should select the response that most effectively reduces the stated exposure while preserving appropriate oversight, traceability, and alignment with organizational risk tolerance and business requirements.