cert
cert-1
cert-2

Pass Isaca AAIA Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
AAIA Exam - Verified By Experts
AAIA Premium Bundle
$14.99

AAIA Premium Bundle

$74.99
$89.98
  • Premium File 556 Questions & Answers. Last update: Nov 08, 2026
  • Training Course 110 Video Lectures
 
$89.98
$74.99
accept 22 downloads in last 7 days
block-screenshots
Purchase Isaca AAIA Exam Training Products Individually
Isaca AAIA Premium File
Premium File 556 Q&A
$76.99$69.99
Isaca AAIA Video Training Course
Training Course 110 Lectures
$21.99 $19.99
Isaca AAIA Practice Test 86

Question 850

An independent AI auditor reviews this case: A support RAG index silently substitutes outdated policy chunks because no ingest integrity validation exists. Which TWO complementary elements should the auditor seek: an effective corrective control and the most probative independent evidence? Select TWO answers.

  1. Inspect index access, chunk hashes, ingest logs, tenant segregation and adversarial retrieval results.
  2. Inspect tool manifests, service accounts, approval gates, injection tests and action receipts.
  3. Evaluate unintended inference from model outputs and minimize observable detail and query access.
  4. Authenticate retrieval corpus updates, isolate tenants and test ranking anomalies and source integrity.
  5. Treat a vector index as trusted merely because its database is behind a corporate firewall.

Explanation

Correct Answers

A:

The reason it is necessary is: Embedding and retrieval layers are separate data-integrity surfaces that can manipulate downstream model answers. This evidence directly tests the asserted control for Poisoned embedding and vector retrieval index: Inspect index access, chunk hashes, ingest logs, tenant segregation and adversarial retrieval results.

D:

The reason it is necessary is: Embedding and retrieval layers are separate data-integrity surfaces that can manipulate downstream model answers. For this situation: A support RAG index silently substitutes outdated policy chunks because no ingest integrity validation exists.

Incorrect Answers

B:

This option concerns AI tool misuse and excessive agency, which is a related but different AI governance concern. For this situation: A support RAG index silently substitutes outdated policy chunks because no ingest integrity validation exists.

C:

This option concerns Model inversion and sensitive attribute leakage, which is a related but different AI governance concern. In this case: A support RAG index silently substitutes outdated policy chunks because no ingest integrity validation exists.

E:

This attractive shortcut does not resolve the Poisoned embedding and vector retrieval index weakness: Treat a vector index as trusted merely because its database is behind a corporate firewall. For this situation: A support RAG index silently substitutes outdated policy chunks because no ingest integrity validation exists.

Question 851

A governance and assurance review uncovers the following: A support RAG index silently substitutes outdated policy chunks because no ingest integrity validation exists. What evidence should the auditor examine FIRST to substantiate or challenge the control owner’s claim? Select ONE best answer.

  1. Treat a vector index as trusted merely because its database is behind a corporate firewall.
  2. Inspect signatures, hash attestations, artifact ACLs, dependency inventory and rebuild records.
  3. Review label guidelines, inter-rater reliability, adjudication logs, sampled errors and retraining effects.
  4. Inspect index access, chunk hashes, ingest logs, tenant segregation and adversarial retrieval results.

Explanation

Correct Answer

D:

For this situation: A support RAG index silently substitutes outdated policy chunks because no ingest integrity validation exists.

Incorrect Answers

A:

It misses the key control principle: Embedding and retrieval layers are separate data-integrity surfaces that can manipulate downstream model answers.

B:

This option concerns Foundation model dependency and artifact tampering, which is a related but different AI governance concern. In this case: A support RAG index silently substitutes outdated policy chunks because no ingest integrity validation exists.

C:

This option concerns Label quality and human annotator agreement, which is a related but different AI governance concern. In this case: A support RAG index silently substitutes outdated policy chunks because no ingest integrity validation exists.

Question 852

A risk-based audit engagement examines this operating condition: A support RAG index silently substitutes outdated policy chunks because no ingest integrity validation exists. After management addresses the issue, which result MOST convincingly demonstrates effective remediation? Select ONE best answer.

  1. Production loads only authenticated approved artifacts and tamper attempts are denied or alerted.
  2. Only approved corpus changes influence outputs, and unexpected ranking changes trigger investigation.
  3. Treat a vector index as trusted merely because its database is behind a corporate firewall.
  4. Requests outside approved privilege and business policy are refused before any sensitive side effect.

Explanation

Correct Answer

B:

This is an observable validation result for Poisoned embedding and vector retrieval index, not just management assurance: Only approved corpus changes influence outputs, and unexpected ranking changes trigger investigation.

Incorrect Answers

A:

This option concerns Foundation model dependency and artifact tampering, which is a related but different AI governance concern. For this situation: A support RAG index silently substitutes outdated policy chunks because no ingest integrity validation exists.

C:

The auditor should instead examine: Inspect index access, chunk hashes, ingest logs, tenant segregation and adversarial retrieval results.

D:

This option concerns AI tool misuse and excessive agency, which is a related but different AI governance concern. The audit must corroborate: Inspect index access, chunk hashes, ingest logs, tenant segregation and adversarial retrieval results.

Question 853

An audit committee asks for a defensible assessment of this situation: An AI team imports weights from an anonymous mirror that differs from the vendor's signed release. What is the MOST appropriate risk-based audit recommendation that addresses the root control weakness? Select ONE best answer.

  1. Verify model provenance, storage integrity, executable dependencies and approved component changes.
  2. Evaluate unintended inference from model outputs and minimize observable detail and query access.
  3. Treat retrieved text as untrusted data, separate instruction authority and constrain downstream tool access.
  4. Assume every pretrained model download from a popular forum is trustworthy without signature or provenance.

Explanation

Correct Answer

A:

Independent audit evidence includes: Inspect signatures, hash attestations, artifact ACLs, dependency inventory and rebuild records. This is the proportionate control response to Foundation model dependency and artifact tampering: Verify model provenance, storage integrity, executable dependencies and approved component changes.

Incorrect Answers

B:

This option concerns Model inversion and sensitive attribute leakage, which is a related but different AI governance concern. It does not establish control effectiveness for Foundation model dependency and artifact tampering.

C:

This option concerns Indirect prompt injection through retrieved content, which is a related but different AI governance concern. It does not establish control effectiveness for Foundation model dependency and artifact tampering.

D:

This attractive shortcut does not resolve the Foundation model dependency and artifact tampering weakness: Assume every pretrained model download from a popular forum is trustworthy without signature or provenance.

Question 854

During an AI controls assessment, the team learns that an AI team imports weights from an anonymous mirror that differs from the vendor's signed release. Which principle BEST explains why the observed practice is a material governance or control concern? Select ONE best answer.

  1. Assume every pretrained model download from a popular forum is trustworthy without signature or provenance.
  2. Embedding and retrieval layers are separate data-integrity surfaces that can manipulate downstream model answers.
  3. Repeated API observations can reveal model behavior or sensitive correlations even without access to the weight files.
  4. Model weights, parsers and surrounding runtime code belong in the software and data supply-chain threat model.

Explanation

Correct Answer

D:

Independent audit evidence includes: Inspect signatures, hash attestations, artifact ACLs, dependency inventory and rebuild records. The corrective action is: Verify model provenance, storage integrity, executable dependencies and approved component changes.

Incorrect Answers

A:

This attractive shortcut does not resolve the Foundation model dependency and artifact tampering weakness: Assume every pretrained model download from a popular forum is trustworthy without signature or provenance. For this situation: An AI team imports weights from an anonymous mirror that differs from the vendor's signed release.

B:

This option concerns Poisoned embedding and vector retrieval index, which is a related but different AI governance concern. It does not establish control effectiveness for Foundation model dependency and artifact tampering.

C:

This option concerns AI model extraction and excessive query access, which is a related but different AI governance concern. It does not establish control effectiveness for Foundation model dependency and artifact tampering.

Question 855

An independent AI auditor reviews this case: An AI team imports weights from an anonymous mirror that differs from the vendor's signed release. What evidence should the auditor examine FIRST to substantiate or challenge the control owner’s claim? Select ONE best answer.

  1. Inspect signatures, hash attestations, artifact ACLs, dependency inventory and rebuild records.
  2. Inspect pipeline roles, artifact signatures, dataset permissions, approval gates and production change logs.
  3. Compare provider release notes, model ID, output baselines, contractual notices and drift alerts.
  4. Assume every pretrained model download from a popular forum is trustworthy without signature or provenance.

Explanation

Correct Answer

A:

The corrective action is: Verify model provenance, storage integrity, executable dependencies and approved component changes. This evidence directly tests the asserted control for Foundation model dependency and artifact tampering: Inspect signatures, hash attestations, artifact ACLs, dependency inventory and rebuild records.

Incorrect Answers

B:

This option concerns AI data and model CI/CD separation, which is a related but different AI governance concern. It does not establish control effectiveness for Foundation model dependency and artifact tampering.

C:

This option concerns External foundation-model update change notices, which is a related but different AI governance concern. It does not establish control effectiveness for Foundation model dependency and artifact tampering.

D:

This attractive shortcut does not resolve the Foundation model dependency and artifact tampering weakness: Assume every pretrained model download from a popular forum is trustworthy without signature or provenance. It misses the key control principle: Model weights, parsers and surrounding runtime code belong in the software and data supply-chain threat model.

Question 856

A governance and assurance review uncovers the following: An AI team imports weights from an anonymous mirror that differs from the vendor's signed release. After management addresses the issue, which result MOST convincingly demonstrates effective remediation? Select ONE best answer.

  1. Unintended sensitive inference is bounded and logged access follows approved purpose.
  2. Assume every pretrained model download from a popular forum is trustworthy without signature or provenance.
  3. Only signed approved model-data combinations reach production and privilege tests fail closed.
  4. Production loads only authenticated approved artifacts and tamper attempts are denied or alerted.

Explanation

Correct Answer

D:

Independent audit evidence includes: Inspect signatures, hash attestations, artifact ACLs, dependency inventory and rebuild records. This is an observable validation result for Foundation model dependency and artifact tampering, not just management assurance: Production loads only authenticated approved artifacts and tamper attempts are denied or alerted.

Incorrect Answers

A:

This option concerns Model inversion and sensitive attribute leakage, which is a related but different AI governance concern. For this situation: An AI team imports weights from an anonymous mirror that differs from the vendor's signed release.

B:

This attractive shortcut does not resolve the Foundation model dependency and artifact tampering weakness: Assume every pretrained model download from a popular forum is trustworthy without signature or provenance. Verify model provenance, storage integrity, executable dependencies and approved component changes.

C:

This option concerns AI data and model CI/CD separation, which is a related but different AI governance concern. For this situation: An AI team imports weights from an anonymous mirror that differs from the vendor's signed release.

Question 857

A risk-based audit engagement examines this operating condition: A third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed. What is the MOST appropriate risk-based audit recommendation that addresses the root control weakness? Select ONE best answer.

  1. Verify model provenance, storage integrity, executable dependencies and approved component changes.
  2. Assume every pretrained model download from a popular forum is trustworthy without signature or provenance.
  3. Require contractual update notifications, version observability, revalidation and compensating fallback for material supplier changes.
  4. Separate development, test and production roles with controlled promotion, scoped credentials and audit trails.

Explanation

Correct Answer

A:

Independent audit evidence includes: Inspect signatures, hash attestations, artifact ACLs, dependency inventory and rebuild records. The acceptable verified outcome is: Production loads only authenticated approved artifacts and tamper attempts are denied or alerted.

Incorrect Answers

B:

This attractive shortcut does not resolve the Foundation model dependency and artifact tampering weakness: Assume every pretrained model download from a popular forum is trustworthy without signature or provenance. In this case: A third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed.

C:

This option concerns External foundation-model update change notices, which is a related but different AI governance concern. In this case: A third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed.

D:

This option concerns AI data and model CI/CD separation, which is a related but different AI governance concern. In this case: A third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed.

Question 858

An audit committee asks for a defensible assessment of this situation: A third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed. Which principle BEST explains why the observed practice is a material governance or control concern? Select ONE best answer.

  1. AI outputs cannot be audited reliably when their source records, transformations and model lineage cannot be reconstructed.
  2. Assume every pretrained model download from a popular forum is trustworthy without signature or provenance.
  3. Repeated API observations can reveal model behavior or sensitive correlations even without access to the weight files.
  4. Model weights, parsers and surrounding runtime code belong in the software and data supply-chain threat model.

Explanation

Correct Answer

D:

Independent audit evidence includes: Inspect signatures, hash attestations, artifact ACLs, dependency inventory and rebuild records. In this case: A third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed.

Incorrect Answers

A:

This option concerns AI training dataset lineage and reproducibility, which is a related but different AI governance concern. It does not establish control effectiveness for Foundation model dependency and artifact tampering.

B:

This attractive shortcut does not resolve the Foundation model dependency and artifact tampering weakness: Assume every pretrained model download from a popular forum is trustworthy without signature or provenance. For this situation: A third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed.

C:

This option concerns AI model extraction and excessive query access, which is a related but different AI governance concern. In this case: A third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed.

Question 859

During an AI controls assessment, the team learns that a third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed. What evidence should the auditor examine FIRST to substantiate or challenge the control owner’s claim? Select ONE best answer.

  1. Inspect signatures, hash attestations, artifact ACLs, dependency inventory and rebuild records.
  2. Assume every pretrained model download from a popular forum is trustworthy without signature or provenance.
  3. Inspect tool manifests, service accounts, approval gates, injection tests and action receipts.
  4. Inspect output schemas, reconstruction probes, privacy threat model, aggregation and access restrictions.

Explanation

Correct Answer

A:

The corrective action is: Verify model provenance, storage integrity, executable dependencies and approved component changes. The acceptable verified outcome is: Production loads only authenticated approved artifacts and tamper attempts are denied or alerted.

Incorrect Answers

B:

This attractive shortcut does not resolve the Foundation model dependency and artifact tampering weakness: Assume every pretrained model download from a popular forum is trustworthy without signature or provenance. Effective closure requires: Production loads only authenticated approved artifacts and tamper attempts are denied or alerted.

C:

This option concerns AI tool misuse and excessive agency, which is a related but different AI governance concern. It does not establish control effectiveness for Foundation model dependency and artifact tampering.

D:

This option concerns Model inversion and sensitive attribute leakage, which is a related but different AI governance concern. In this case: A third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed.

Question 860

An independent AI auditor reviews this case: A third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed. Which TWO complementary elements should the auditor seek: an effective corrective control and the most probative independent evidence? Select TWO answers.

  1. Treat retrieved text as untrusted data, separate instruction authority and constrain downstream tool access.
  2. Inspect tool manifests, service accounts, approval gates, injection tests and action receipts.
  3. Verify model provenance, storage integrity, executable dependencies and approved component changes.
  4. Assume every pretrained model download from a popular forum is trustworthy without signature or provenance.
  5. Inspect signatures, hash attestations, artifact ACLs, dependency inventory and rebuild records.

Explanation

Correct Answers

C:

Independent audit evidence includes: Inspect signatures, hash attestations, artifact ACLs, dependency inventory and rebuild records. For this situation: A third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed.

E:

The corrective action is: Verify model provenance, storage integrity, executable dependencies and approved component changes. For this situation: A third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed.

Incorrect Answers

A:

This option concerns Indirect prompt injection through retrieved content, which is a related but different AI governance concern. In this case: A third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed.

B:

This option concerns AI tool misuse and excessive agency, which is a related but different AI governance concern. For this situation: A third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed.

D:

For this situation: A third-party model package includes an unexpected runtime hook but its license and dependencies were never reviewed.

ISACA Advanced in AI Audit (AAIA) Practice Tests