AAISM Domain 2 Practice Test

These questions are part of the practice quiz. Start practicing

• Which NAS component focuses on training and validating candidate models to compare and select the best one with cost efficiency in mind?
• MAESTRO stands for Multi-Agent Environment, Security, Threat Risk, and Outcome and refers to which entity?
• Which model-free reinforcement learning algorithm seeks to learn the value of state-action pairs and uses a Q-table to represent action values?
• Which issue occurs when LLM outputs are not sufficiently validated or sanitized and are passed to other systems?
• What is the process of evaluating a model against predefined benchmarks, including metrics such as accuracy, precision, and recall?
• Which term describes the inability to explain AI decisions and outcomes, a common concern in security and privacy contexts?
• Intellectual Property Risk arises when which condition is present?
• Generative AI models are trained on vast datasets and typically use which combination of learning methods?
• In dataflow mapping, which aspect should be considered when data is introduced?
• Generative AI (GenAI) is best described as which of the following?
• Data subjects can request that their data no longer be processed in a certain way that they once approved, but they may still allow the organization to process the data in some fashion. Which right is this?
• If a company's database includes incorrect information, data subjects have the right to request that it is corrected. Which right is this?
• Which threat modeling method is named for being Visual, Agile and Simple Threat?
• Data subjects can gain access to data that organizations have about them, including the ability to receive a copy of that information or direct access to the organization's database. Which right does this describe?
• Which actor may use AI to advance its strategic interests, including cyber espionage, surveillance, or warfare?
• Which risk approach involves moving the impact of risk to an external third party with associated costs?
• Which limitation notes that some AI risk analyses fail to address AI-specific threats and challenges?
• What does an access control review primarily monitor?
• Which activity in the NIST AI RMF is about prioritizing risk and acting on it based on projected impact?
• Which DL architecture uses a generator to create samples and a discriminator to evaluate them?
• Which threat modeling method provides a foundation for recognizing vulnerabilities related to the use of AI (e.g., data tampering or denial of service) but lacks AI-specific challenges?
• Which model is designed for sequential data and can pass information from one step to the next?
• Vendors beyond the third party within a relationship ecosystem (e.g., fourth-party, fifth-party) are referred to as which term?
• Which algorithm is commonly used for classification and predictive modeling and aims to find a separating hyperplane between classes?
• Misinformation refers to LLMs producing false or misleading information that seems credible due to hallucinations.
• In hierarchical clustering, which approach is the counterpart to agglomerative clustering that starts with a single cluster and splits based on dissimilarities?
• What is the end result produced by hierarchical clustering?
• Which method predicts the probability of an event based on independent variables and is commonly used for binary classification?
• What is model poisoning?
• Which risk strategy involves applying controls to bring risk within acceptable limits?
• What is the name of deep learning models that use a generator and a discriminator trained together and competing against each other?
• Which threat modeling method is described as lacking specificity for AI threats and vulnerabilities, even though it works well with iterative AI development?
• What is the term for training machine learning models to make a sequence of decisions?
• Which term describes a scenario where the model's outputs are inadequately sanitized before being used elsewhere, increasing risk to downstream systems?
• Which term describes a basic neural network without cycles, designed for straightforward predictions?
• What enables Deep Q-Networks to scale to complex environments instead of maintaining a Q-table?
• Security incidents or failures can result in what impact on the organization’s reputation?
• Which concept encompasses the creation of machines capable of understanding and mimicking human thought patterns and decision-making processes?
• AI agents capable of making autonomous decisions to achieve objectives like improving customer satisfaction are known as what?
• A common strategy for drawing information from multiple sources by extracting data from its home database, transforming and cleansing it to adhere to common data definitions, and then loading it into the data warehouse describes which process?
• AI model inversion and related risk areas include focus on AI-specific categories such as multi-agent and environmental considerations. Which statement best describes this focus?
• Which term describes a multidisciplinary field that combines computer science, computer engineering, statistics, and other mathematics to analyze and meaningfully extract insights from large amounts of data?
• Which category has AI systems with little or no regulatory oversight, such as spam filters?
• Which field is defined as a multidisciplinary domain that combines computer science, statistics, and visualization to analyze data and extract insights?
• Which term describes the task of predicting a continuous outcome from a dataset?
• Which technique reduces high-dimensional data to a lower-dimensional representation while preserving essential information?
• Which term refers to vendors or subcontractors a third-party vendor relies on (vendors of vendors)?
• The inability to explain unexpected results from AI systems is a major concern for security professionals. Which concept describes this?
• In reinforcement learning, what is the data structure that stores the estimated value of each state-action pair called?
• Vendors that fourth-party vendors rely on, continuing the outsourcing chain, are called which party?
• Which right allows data subjects to request that their data be destroyed after consent is revoked?
• Intellectual Property Risk in AI-generated content is most accurately described as arising when which condition exists?
• Which statement accurately identifies the purpose of a centralized AI database management?
• In the NIST AI RMF, which activity covers risk being assessed, analyzed, or tracked?
• Which term describes risk where data used to train or validate the model can be manipulated to embed backdoors or biases?
• Which learning paradigm does not have a defined target variable?
• Which practice aligns with data privacy governance by encrypting, anonymizing, and controlling access?
• Which model is described as Visual, Agile and Simple Threat?
• AI provider refers to which entity?
• When do runtime security threats occur?
• Where does computation and learning occur in a neural network?
• Which statement about the AI deployer is accurate?
• Which stakeholder group is described as potentially creating AI solutions that do not align with widely accepted ethical standards?
• Which term refers to a set of rules that describe associations between items in large datasets?
• Retrieval augmented generation with LLMs can reveal vulnerabilities due to how vectors and embeddings used to train the model are generated, stored, or retrieved.
• Which term uncovers how items within large datasets are associated with each other and reveals the probability of relationships between data items?
• In the NIST AI RMF, which activity involves recognizing the context and identifying risk related to it?
• In data ingestion, which aspect should be examined?
• Which approach uses neural networks to approximate Q-values for high-dimensional state spaces, instead of a Q-table?
• Which category includes AI systems that cannot materially harm an individual and pose limited risk, with transparency?
• Which threat modeling method works well with iterative development common in AI solutions but lacks AI-specific threats?
• Which approach focuses on grouping data points into clusters based on similarity?
• Which describes a complex collection of algorithms designed to mimic the way the human brain functions, with the goal of identifying patterns and making sense of the data?
• Which concept implies machines that could eventually judge their own mental states as well as others'?
• If enterprises operate AI solutions in a non-compliant manner with data privacy regulations or AI-related laws, what may be imposed?
• Which activity compares a model's performance with existing models or baselines to identify improvement opportunities?
• Which term describes early AI systems that operate by reacting to inputs with limited functionality and do not use memory beyond brief experiences?
• Which risk outcome indicates risk falls within acceptable limits and only monitoring is required?
• Failure of systems designed to support business processes can lead to which outcome?
• In neural architecture search, which term defines the set of properties and constraints used to define the models to explore?
• MAESTRO refers to which entity in the AI deployment ecosystem?
• Which field uses supervised or unsupervised learning methods to detect patterns in large datasets, allowing machines to learn and adapt?
• If a competitor steals training data or uses adversarial AI to disrupt services, what is a likely consequence for the enterprise?
• Which framework analyzes how personal information is collected, used, shared, and maintained within a defined scope, and is foundational in privacy governance?
• Which framework is noted for emphasizing asset identification as a key practice for AI and related data?
• Which term describes the risk as data used to train/validate being manipulated?
• Nth Parties involves techniques that equip computers to emulate human behavior, enabling them to learn, make decisions, recognize patterns, and solve complex problems. Which term best describes this field?
• Which practice is explicitly described for data storage and archiving?
• Deep Learning leverages multiple layers of neural networks to extract high-level features from raw input data. Which option best matches this characteristic?
• Which term describes an organization that uses an AI product or service, directly or via its distribution to users?
• Which category describes chatbots that pose limited risk and require transparency?
• Which statistical method reduces dimensionality by transforming variables into uncorrelated principal components that capture maximum variance, with the first component explaining the most variance?
• Which class of models uses decision trees to capture nonlinear relationships and can be used for classification, regression, and feature selection?
• Which of the following is NOT one of the four key areas of the NIST AI RMF?
• Which process involves extracting data from source systems, transforming it, and then loading it into a data warehouse?
• Which practice involves evaluating the AI solution in a real-world-like environment prior to full deployment?
• Where is the final prediction or result produced in a neural network?
• A system that manipulates human behavior in a way that could cause severe harm is categorized as which risk?
• Which clustering method initializes with K centroids and assigns each point to the nearest centroid?
• In neural architecture search, which term describes the techniques used to search for target models, such as random search and Bayesian optimization?
• Which simple supervised learning algorithm models the relationship between a dependent variable and independent variables by fitting a linear equation?
• Which term captures the general issue of LLMs producing false or misleading information that appears credible?
• Which term best describes an organization that designs, develops, tests, and deploys AI products or services?
• Which cost category covers expenses associated with recovery from data breaches or service disruptions?
• Which topic transforms high-dimensional data into a lower-dimensional space to simplify the data while retaining its essential features?
• What does a privacy impact assessment (PIA) analyze?
• Which approach is essential for AI risk management to be effective?
• Which of the following is included as a component of a fundamental rights impact assessment (FRIA)?
• Where does the neural network receive the input data?
• How can enterprises mitigate Intellectual Property Risk in AI-generated content?
• Which statement best describes the primary objective of model testing?
• Which model is noted as being complex and having difficulty addressing internal systems and threats related to them?
• In AI risk management, which practice is emphasized as central to identifying assets?
• Which clustering approach starts with each data point as a separate cluster and merges them based on dissimilarity?
• Data Integrity Monitoring emphasizes which action?
• Which term groups data points with similar characteristics into clusters?
• Which model family is known for handling nonlinear patterns by recursively splitting data into leaf nodes?
• Which threat modeling approach focuses on privacy concerns and can be used for data security but lacks AI-specific threats?
• Which AI category includes applications that manipulate behavior, violate rights, or engage in social scoring and are prohibited?
• What risk occurs when prompts or instructions used to direct the model contain sensitive information or bypass guardrails?
• How may cybercriminals utilize AI to enhance their attacks?
• Unbounded consumption occurs when an LLM enables end users to make excessive inferences, which can lead to denial of service errors and financial loss.
• What term describes the risk that an organization's own employees may misuse AI systems to cause harm?
• Which right allows individuals to limit processing of their data to specific purposes or to pause processing under certain conditions?
• Which type of machine learning is trained by providing explicit examples of desired results, such as defective vs non-defective items?
• Which family of methods directly optimizes the policy mapping from states to actions?
• Development-time threats are described as threats that arise during development due to security weaknesses not AI-specific. Which statement best captures this concept?
• What is the primary purpose of bias and fairness checks?
• What type of attack is specifically aimed at disrupting AI-powered services?
• Which linear model predicts a continuous outcome by fitting a linear equation?
• Which statement best describes data storage and archiving practices?
• In piloting, which elements should be included?
• Which AI system is one of the earliest forms that automatically generates responses to a limited set of inputs and has limited functionality?
• Development-time threats arise from security weaknesses not AI-specific and are associated with attack surfaces such as the engineering environment and supply chain. Which statement best characterizes these threats?
• What term describes when an attacker uses specific prompts to alter the behavior of an LLM model?
• Which right ensures that once consent is withdrawn, data processing can be ceased, potentially resulting in data deletion?
• Which data subject right allows individuals to know how their data is being collected and used, with whom it is shared, and how long it is retained?
• Which risk strategy means the costs of controls exceed the perceived value to be gained?
• Machines with a static memory repository for a fixed world rendition and dynamic memory for brief memories are known as what?
• Which threat involves an attacker manipulating a model's parameters, architecture, or libraries to cause undesirable model behavior?
• Which term refers to the practice of manipulating embedding representations to distort a model's output?
• Which testing method evaluates a model's robustness by exposing it to extreme conditions or edge cases?
• Which discriminative classifier has a margin-based objective and often performs well on small datasets?
• Which clustering technique partitions data by assigning points to the nearest centroid and requires specifying the number of clusters?
• Which classification method is commonly used to predict class probabilities for binary outcomes?
• Which AI category focuses on autonomous decision making to optimize outcomes like customer satisfaction?
• In the definitions, the AI provider refers to which entity?
• Which term applies to machines that are aware of others' emotions and mental states and also their own?
• Which regulation establishes a risk-based framework for AI governance in the European Union?
• What is the AI RMF described as?
• Which threat modeling approach integrates risk assessment and risk prioritization with a structured modeling approach but is complex and lacks AI-specific threats?
• Deep Learning is defined as which of the following?
• Which right states that data subjects have the right to be informed about how their data is collected and used?
• Which component is included in a data privacy impact assessment?
• Which statement best describes Centralized AI database management?
• In AI risk assessment, which assets should be prioritized for identification?
• Which statement best reflects the potential consequences of the AI deployer role?
• FRIA stands for what?
• Which statement best describes bias and fairness checks in AI governance?
• Which term captures exposure of personally identifiable information due to use of an LLM?
• Which term describes the entities an AI provider directly contracts or collaborates with, such as data providers, model developers, or cloud service providers?
• Which term describes the vulnerability where vectors and embeddings used by RAG systems are inadequately protected?
• Which neural network architecture features information flowing in one direction from the input layer to the output layer with no loops and is commonly used for image classification and regression tasks?
• Which threat modeling approach is described as easy to apply and understand, but lacks AI-specific sophistication?
• Which model specializes in grid-like data such as images and uses convolutional layers?
• Which term describes the evaluation designed to protect fundamental rights in AI systems?
• Data subjects have the right to revoke consent, meaning the permission to use their information can be withdrawn and their data must be destroyed. Which right is this?
• Which term describes a neural network architecture where information moves forward in a single pass and is commonly used for image classification?
• Which supply chain party refers to vendors that fourth-party vendors rely on in the outsourcing chain?
• The European Union AI Act applies to which entities?
• What term describes the practice of tampering with embedding matrices to skew a model's results?
• Which risk arises when data used to train and validate the model is manipulated to introduce vulnerabilities?
• What term describes when an LLM gains the ability to perform actions or call functions via prompts?
• Which learning paradigm does not rely on labeled outcomes?
• Which term captures the risk of prompts revealing sensitive internal prompts or guardrails?
• Which term identifies the most probable category for a dataset based on probability-based predictions?
• Which term describes the techniques that enable computers to emulate human behavior, enabling them to learn, make decisions, recognize patterns, and solve complex problems?
• Which practice ensures equity across user populations by evaluating model behavior in diverse scenarios?
• ML algorithms use which learning methods?