What control most directly reduces exposure when an AI application handles sensitive prompts and outputs?

Least-privilege access with data classification and handling rules

An AI service credential is exposed in a code repository. What should happen first?

Revoke or rotate the credential, restrict access, and preserve evidence for review

Which evidence best supports approval of a changed third-party AI component in a security-sensitive workflow?

Signed provenance, component inventory, vulnerability review, and documented approval

Advanced in AI Security Management (AAISM) Practice Test: 3 Free Questions

Exam-specific sample

Questions, answers, and option-by-option explanations

Each explanation identifies why the correct option fits and why the distractors do not.

Easy AI security governance

Question 1

What control most directly reduces exposure when an AI application handles sensitive prompts and outputs?
1. Least-privilege access with data classification and handling rules
2. Giving every project member administrator access
3. Publishing prompts in a shared public channel
4. Removing all authentication to simplify testing
Correct answer: A. Least-privilege access with data classification and handling rules
Review option explanations
- A. Correct. Access restriction and data handling controls limit exposure to authorized purposes and users.
- B. Broad administrator access increases unnecessary privilege.
- C. Public sharing conflicts with sensitive-data protection.
- D. Removing authentication eliminates an essential security boundary.
Medium AI incident response

Question 2

An AI service credential is exposed in a code repository. What should happen first?
1. Revoke or rotate the credential, restrict access, and preserve evidence for review
2. Wait until the next scheduled release
3. Delete the repository history without assessing access
4. Ask users to change their display names
Correct answer: A. Revoke or rotate the credential, restrict access, and preserve evidence for review
Review option explanations
- A. Correct. Immediate containment reduces active exposure while retaining evidence for investigation.
- B. Delaying containment leaves the credential usable.
- C. Deleting history alone may not contain the credential and can remove evidence.
- D. Display names are unrelated to credential exposure.
Hard AI security assurance

Question 3

Which evidence best supports approval of a changed third-party AI component in a security-sensitive workflow?
1. Signed provenance, component inventory, vulnerability review, and documented approval
2. A marketing statement describing innovation
3. A verbal assurance from a sales representative
4. A copy of the annual budget
Correct answer: A. Signed provenance, component inventory, vulnerability review, and documented approval
Review option explanations
- A. Correct. Provenance, inventory, review, and approval form a traceable assurance record.
- B. Marketing material does not demonstrate security review.
- C. A verbal assurance is not sufficient technical evidence.
- D. Budget data does not establish component integrity or vulnerability handling.

More

Advanced in AI Security Management (AAISM) Practice Test: 3 Free Questions

Questions, answers, and option-by-option explanations

Question 1

Question 2

Question 3

Continue with the full exam-prep cluster

How can I help?