cert
cert-1
cert-2

Pass Isaca AAIA Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
AAIA Exam - Verified By Experts
AAIA Premium Bundle
$14.99

AAIA Premium Bundle

$74.99
$89.98
  • Premium File 556 Questions & Answers. Last update: Nov 08, 2026
  • Training Course 110 Video Lectures
 
$89.98
$74.99
accept 22 downloads in last 7 days
block-screenshots
Purchase Isaca AAIA Exam Training Products Individually
Isaca AAIA Premium File
Premium File 556 Q&A
$76.99$69.99
Isaca AAIA Video Training Course
Training Course 110 Lectures
$21.99 $19.99
Isaca AAIA Practice Test 92

Question 910

An independent AI auditor reviews this case: A security classifier's trusted training labels are replaced with malicious values just before nightly retraining. Which TWO complementary elements should the auditor seek: an effective corrective control and the most probative independent evidence? Select TWO answers.

  1. Quarantine suspicious inputs and models, preserve provenance, revert to validated artifacts and investigate contamination.
  2. Inspect ingestion bursts, source identities, dataset hashes, registry links and clean restore evidence.
  3. Delete suspicious records from live storage but leave poisoned model weights running as if unaffected.
  4. Inspect tool invocation audit, actor scopes, approval checks, external transaction state and rollback capability.
  5. Separate development, test and production roles with controlled promotion, scoped credentials and audit trails.

Explanation

Correct Answers

A:

The reason it is necessary is: Poisoning response must address both malicious input and any model or derived features trained on it. This response fits the risk associated with Model poisoning incident response and rollback: Quarantine suspicious inputs and models, preserve provenance, revert to validated artifacts and investigate contamination.

B:

The reason it is necessary is: Poisoning response must address both malicious input and any model or derived features trained on it. The corrective action is: Quarantine suspicious inputs and models, preserve provenance, revert to validated artifacts and investigate contamination.

Incorrect Answers

C:

This attractive shortcut does not resolve the Model poisoning incident response and rollback weakness: Delete suspicious records from live storage but leave poisoned model weights running as if unaffected. For this situation: A security classifier's trusted training labels are replaced with malicious values just before nightly retraining.

D:

This option concerns AI agent unauthorized action incident, which is a related but different AI governance concern. The decisive principle here is: Poisoning response must address both malicious input and any model or derived features trained on it.

E:

This option concerns AI data and model CI/CD separation, which is a related but different AI governance concern. The audit must corroborate: Inspect ingestion bursts, source identities, dataset hashes, registry links and clean restore evidence.

Question 911

A governance and assurance review uncovers the following: A security classifier's trusted training labels are replaced with malicious values just before nightly retraining. What evidence should the auditor examine FIRST to substantiate or challenge the control owner’s claim? Select ONE best answer.

  1. Inspect canary assignment, segment KPIs, error thresholds, baseline model artifacts and rollback drill.
  2. Inspect ingestion bursts, source identities, dataset hashes, registry links and clean restore evidence.
  3. Delete suspicious records from live storage but leave poisoned model weights running as if unaffected.
  4. Inspect tool invocation audit, actor scopes, approval checks, external transaction state and rollback capability.

Explanation

Correct Answer

B:

The reason it is necessary is: Poisoning response must address both malicious input and any model or derived features trained on it. For this situation: A security classifier's trusted training labels are replaced with malicious values just before nightly retraining.

Incorrect Answers

A:

This option concerns Canary releases and model rollback thresholds, which is a related but different AI governance concern. The audit must corroborate: Inspect ingestion bursts, source identities, dataset hashes, registry links and clean restore evidence.

C:

For this situation: A security classifier's trusted training labels are replaced with malicious values just before nightly retraining.

D:

This option concerns AI agent unauthorized action incident, which is a related but different AI governance concern. For this situation: A security classifier's trusted training labels are replaced with malicious values just before nightly retraining.

Question 912

A risk-based audit engagement examines this operating condition: A security classifier's trusted training labels are replaced with malicious values just before nightly retraining. After management addresses the issue, which result MOST convincingly demonstrates effective remediation? Select ONE best answer.

  1. Affected decisions are reviewed, relevant stakeholders notified and preventive controls verified.
  2. Validated clean versions restore approved behavior and compromised data cannot silently retrain new releases.
  3. Scope and notifications are accurate, exposure is blocked and controls are retested before reopening.
  4. Delete suspicious records from live storage but leave poisoned model weights running as if unaffected.

Explanation

Correct Answer

B:

This is an observable validation result for Model poisoning incident response and rollback, not just management assurance: Validated clean versions restore approved behavior and compromised data cannot silently retrain new releases.

Incorrect Answers

A:

This option concerns AI model rollback and stakeholder communication, which is a related but different AI governance concern. The outcome to verify is: Validated clean versions restore approved behavior and compromised data cannot silently retrain new releases.

C:

This option concerns AI privacy incident preservation and escalation, which is a related but different AI governance concern. The audit must corroborate: Inspect ingestion bursts, source identities, dataset hashes, registry links and clean restore evidence.

D:

The auditor should instead examine: Inspect ingestion bursts, source identities, dataset hashes, registry links and clean restore evidence.

Question 913

An audit committee asks for a defensible assessment of this situation: An AI invoice assistant sends a payment to an attacker-specified account after reading a forged vendor note. What is the MOST appropriate risk-based audit recommendation that addresses the root control weakness? Select ONE best answer.

  1. Quarantine suspicious inputs and models, preserve provenance, revert to validated artifacts and investigate contamination.
  2. Coordinate technical recovery with affected stakeholder review, corrective communication and validated post-incident controls.
  3. Update the prompt wording only and ignore payments or infrastructure changes the agent already executed.
  4. Disable or restrict affected tools, preserve transaction records and verify downstream changes before re-enabling.

Explanation

Correct Answer

D:

The reason it is necessary is: Agentic incidents involve real external actions; merely correcting generated text may not undo the harm. This is the proportionate control response to AI agent unauthorized action incident: Disable or restrict affected tools, preserve transaction records and verify downstream changes before re-enabling.

Incorrect Answers

A:

This option concerns Model poisoning incident response and rollback, which is a related but different AI governance concern. It does not establish control effectiveness for AI agent unauthorized action incident.

B:

This option concerns AI model rollback and stakeholder communication, which is a related but different AI governance concern. It does not establish control effectiveness for AI agent unauthorized action incident.

C:

This attractive shortcut does not resolve the AI agent unauthorized action incident weakness: Update the prompt wording only and ignore payments or infrastructure changes the agent already executed.

Question 914

During an AI controls assessment, the team learns that an AI invoice assistant sends a payment to an attacker-specified account after reading a forged vendor note. Which principle BEST explains why the observed practice is a material governance or control concern? Select ONE best answer.

  1. An AI incident ends only after decision impacts, service restoration and recurrence risk are addressed.
  2. Agentic incidents involve real external actions; merely correcting generated text may not undo the harm.
  3. Availability and financial loss from AI resource abuse require controls beyond traditional request success checks.
  4. Update the prompt wording only and ignore payments or infrastructure changes the agent already executed.

Explanation

Correct Answer

B:

Independent audit evidence includes: Inspect tool invocation audit, actor scopes, approval checks, external transaction state and rollback capability. This is the applicable AI audit principle for AI agent unauthorized action incident: Agentic incidents involve real external actions; merely correcting generated text may not undo the harm.

Incorrect Answers

A:

This option concerns AI model rollback and stakeholder communication, which is a related but different AI governance concern. The decisive principle here is: Agentic incidents involve real external actions; merely correcting generated text may not undo the harm.

C:

This option concerns AI availability and unbounded consumption incident, which is a related but different AI governance concern. It does not establish control effectiveness for AI agent unauthorized action incident.

D:

This attractive shortcut does not resolve the AI agent unauthorized action incident weakness: Update the prompt wording only and ignore payments or infrastructure changes the agent already executed. The auditor should instead examine: Inspect tool invocation audit, actor scopes, approval checks, external transaction state and rollback capability.

Question 915

An independent AI auditor reviews this case: An AI invoice assistant sends a payment to an attacker-specified account after reading a forged vendor note. What evidence should the auditor examine FIRST to substantiate or challenge the control owner’s claim? Select ONE best answer.

  1. Inspect dataset snapshots, feature pipeline commits, record counts, model registry links and training execution manifests.
  2. Update the prompt wording only and ignore payments or infrastructure changes the agent already executed.
  3. Inspect tool invocation audit, actor scopes, approval checks, external transaction state and rollback capability.
  4. Inspect impact inventory, rollback record, retesting, business communications and lessons-learned owners.

Explanation

Correct Answer

C:

The reason it is necessary is: Agentic incidents involve real external actions; merely correcting generated text may not undo the harm. This evidence directly tests the asserted control for AI agent unauthorized action incident: Inspect tool invocation audit, actor scopes, approval checks, external transaction state and rollback capability.

Incorrect Answers

A:

This option concerns AI training dataset lineage and reproducibility, which is a related but different AI governance concern. It does not establish control effectiveness for AI agent unauthorized action incident.

B:

This attractive shortcut does not resolve the AI agent unauthorized action incident weakness: Update the prompt wording only and ignore payments or infrastructure changes the agent already executed. For this situation: An AI invoice assistant sends a payment to an attacker-specified account after reading a forged vendor note.

D:

This option concerns AI model rollback and stakeholder communication, which is a related but different AI governance concern. For this situation: An AI invoice assistant sends a payment to an attacker-specified account after reading a forged vendor note.

Question 916

A governance and assurance review uncovers the following: An AI invoice assistant sends a payment to an attacker-specified account after reading a forged vendor note. After management addresses the issue, which result MOST convincingly demonstrates effective remediation? Select ONE best answer.

  1. Affected decisions are reviewed, relevant stakeholders notified and preventive controls verified.
  2. Unauthorized changes are reversed or contained and renewed tool access passes adversarial gate tests.
  3. Update the prompt wording only and ignore payments or infrastructure changes the agent already executed.
  4. Unapproved high-impact actions are blocked before execution, and approved actions are attributable.

Explanation

Correct Answer

B:

The reason it is necessary is: Agentic incidents involve real external actions; merely correcting generated text may not undo the harm. This is an observable validation result for AI agent unauthorized action incident, not just management assurance: Unauthorized changes are reversed or contained and renewed tool access passes adversarial gate tests.

Incorrect Answers

A:

This option concerns AI model rollback and stakeholder communication, which is a related but different AI governance concern. The audit must corroborate: Inspect tool invocation audit, actor scopes, approval checks, external transaction state and rollback capability.

C:

This attractive shortcut does not resolve the AI agent unauthorized action incident weakness: Update the prompt wording only and ignore payments or infrastructure changes the agent already executed. Disable or restrict affected tools, preserve transaction records and verify downstream changes before re-enabling.

D:

This option concerns Autonomous agent action-limit supervision, which is a related but different AI governance concern. It does not establish control effectiveness for AI agent unauthorized action incident.

Question 917

A risk-based audit engagement examines this operating condition: A support agent executes a privileged directory action requested by malicious retrieved instructions. What is the MOST appropriate risk-based audit recommendation that addresses the root control weakness? Select ONE best answer.

  1. Update the prompt wording only and ignore payments or infrastructure changes the agent already executed.
  2. Disable or restrict affected tools, preserve transaction records and verify downstream changes before re-enabling.
  3. Version and trace training, validation and inference datasets with accountable lineage, hashes and reproducible pipeline metadata.
  4. Activate an AI-specific incident plan to constrain outputs, preserve evidence, notify responsible owners and restore validated service.

Explanation

Correct Answer

B:

The reason it is necessary is: Agentic incidents involve real external actions; merely correcting generated text may not undo the harm. Independent audit evidence includes: Inspect tool invocation audit, actor scopes, approval checks, external transaction state and rollback capability.

Incorrect Answers

A:

This attractive shortcut does not resolve the AI agent unauthorized action incident weakness: Update the prompt wording only and ignore payments or infrastructure changes the agent already executed. Effective closure requires: Unauthorized changes are reversed or contained and renewed tool access passes adversarial gate tests.

C:

This option concerns AI training dataset lineage and reproducibility, which is a related but different AI governance concern. The decisive principle here is: Agentic incidents involve real external actions; merely correcting generated text may not undo the harm.

D:

This option concerns Response to harmful AI-generated advice, which is a related but different AI governance concern. It does not establish control effectiveness for AI agent unauthorized action incident.

Question 918

An audit committee asks for a defensible assessment of this situation: A support agent executes a privileged directory action requested by malicious retrieved instructions. Which principle BEST explains why the observed practice is a material governance or control concern? Select ONE best answer.

  1. Agentic incidents involve real external actions; merely correcting generated text may not undo the harm.
  2. Update the prompt wording only and ignore payments or infrastructure changes the agent already executed.
  3. AI incidents can harm through decisions and communication even when infrastructure is available.
  4. Availability and financial loss from AI resource abuse require controls beyond traditional request success checks.

Explanation

Correct Answer

A:

Independent audit evidence includes: Inspect tool invocation audit, actor scopes, approval checks, external transaction state and rollback capability. The corrective action is: Disable or restrict affected tools, preserve transaction records and verify downstream changes before re-enabling.

Incorrect Answers

B:

This attractive shortcut does not resolve the AI agent unauthorized action incident weakness: Update the prompt wording only and ignore payments or infrastructure changes the agent already executed. For this situation: A support agent executes a privileged directory action requested by malicious retrieved instructions.

C:

This option concerns Response to harmful AI-generated advice, which is a related but different AI governance concern. The decisive principle here is: Agentic incidents involve real external actions; merely correcting generated text may not undo the harm.

D:

This option concerns AI availability and unbounded consumption incident, which is a related but different AI governance concern. The decisive principle here is: Agentic incidents involve real external actions; merely correcting generated text may not undo the harm.

Question 919

During an AI controls assessment, the team learns that a support agent executes a privileged directory action requested by malicious retrieved instructions. What evidence should the auditor examine FIRST to substantiate or challenge the control owner’s claim? Select ONE best answer.

  1. Review access traces, affected documents, tenant identity, logs, containment steps and privacy leadership decisions.
  2. Inspect dataset snapshots, feature pipeline commits, record counts, model registry links and training execution manifests.
  3. Inspect tool invocation audit, actor scopes, approval checks, external transaction state and rollback capability.
  4. Update the prompt wording only and ignore payments or infrastructure changes the agent already executed.

Explanation

Correct Answer

C:

The reason it is necessary is: Agentic incidents involve real external actions; merely correcting generated text may not undo the harm. The corrective action is: Disable or restrict affected tools, preserve transaction records and verify downstream changes before re-enabling.

Incorrect Answers

A:

This option concerns AI privacy incident preservation and escalation, which is a related but different AI governance concern. It does not establish control effectiveness for AI agent unauthorized action incident.

B:

This option concerns AI training dataset lineage and reproducibility, which is a related but different AI governance concern. For this situation: A support agent executes a privileged directory action requested by malicious retrieved instructions.

D:

It misses the key control principle: Agentic incidents involve real external actions; merely correcting generated text may not undo the harm.

Question 920

An independent AI auditor reviews this case: A support agent executes a privileged directory action requested by malicious retrieved instructions. Which TWO complementary elements should the auditor seek: an effective corrective control and the most probative independent evidence? Select TWO answers.

  1. Contain runaway usage with quotas, timeout and backpressure, investigate access and validate recovery.
  2. Disable or restrict affected tools, preserve transaction records and verify downstream changes before re-enabling.
  3. Update the prompt wording only and ignore payments or infrastructure changes the agent already executed.
  4. Review access traces, affected documents, tenant identity, logs, containment steps and privacy leadership decisions.
  5. Inspect tool invocation audit, actor scopes, approval checks, external transaction state and rollback capability.

Explanation

Correct Answers

B:

The reason it is necessary is: Agentic incidents involve real external actions; merely correcting generated text may not undo the harm. This response fits the risk associated with AI agent unauthorized action incident: Disable or restrict affected tools, preserve transaction records and verify downstream changes before re-enabling.

E:

The reason it is necessary is: Agentic incidents involve real external actions; merely correcting generated text may not undo the harm. The acceptable verified outcome is: Unauthorized changes are reversed or contained and renewed tool access passes adversarial gate tests.

Incorrect Answers

A:

This option concerns AI availability and unbounded consumption incident, which is a related but different AI governance concern. For this situation: A support agent executes a privileged directory action requested by malicious retrieved instructions.

C:

The auditor should instead examine: Inspect tool invocation audit, actor scopes, approval checks, external transaction state and rollback capability.

D:

This option concerns AI privacy incident preservation and escalation, which is a related but different AI governance concern. The decisive principle here is: Agentic incidents involve real external actions; merely correcting generated text may not undo the harm.

ISACA Advanced in AI Audit (AAIA) Practice Tests