Which of the following is the MOST effective action an organization can take to address data security risk when using generative AI features in an application?

1. A. Rely on the AI provider??s independent third-party audit reports for assurance
2. B. Establish policies and awareness training for acceptable use of AI
3. C. Require opt-out provisions for data usage in service agreements
4. D. Establish guidelines and best practices with third parties for intellectual property ownership

Correct Answer: C

An organization is deploying an automated AI cybersecurity system. Which of the following would be the MOST effective strategy to minimize human error and improve overall security?

1. A. Conducting periodic penetration testing
2. B. Using historical data to train AI detection software
3. C. Utilizing machine learning (ML) algorithms to ensure responsible use
4. D. Implementing manual monitoring of potential alerts

Correct Answer: B

Which of the following controls would BEST help to prevent data poisoning in AI models?

1. A. Increasing the size of the training data set
2. B. Implementing a strict data validation mechanism
3. C. Establishing continuous monitoring
4. D. Regularly updating the foundational model

Correct Answer: B

Which of the following is the GREATEST risk inherent to implementing generative AI?

1. A. Lack of employee training
2. B. Unidentified asset vulnerabilities
3. C. Inadequate return on investment (ROI)
4. D. Potential intellectual property violations

Correct Answer: D

A large financial services organization is integrating a third-party AI solution into its critical fraud detection system. Which of the following is the BEST way for the organization to reduce risk associated with AI vendor and supply chain dependencies?

1. A. Conducting annual vulnerability assessments of the fraud detection system after integration
2. B. Focusing on performance testing to ensure the solution meets operational requirements
3. C. Establishing contractual agreements requiring vendors to provide evidence of secure development practices
4. D. Implementing isolated virtual environments to validate the integration of the fraud detection system with the solution

Correct Answer: C