nerdexam
Isaca

AAIA · Question #8

A bank uses a video-based know your customer (KYC) verification process. Cybercriminals exploit this process by using deepfake technology to impersonate bank customers. Which of the following…

The correct answer is B. Leveraging AI-based liveness detection during video verification. AI-based liveness detection analyzes video streams in real time to determine whether the subject is a live, physically present person or a synthetic/pre-recorded deepfake - directly countering the attack vector. It fights AI-generated fraud with AI-based detection. Requesting…

AI Risk Management and Controls

Question

A bank uses a video-based know your customer (KYC) verification process. Cybercriminals exploit this process by using deepfake technology to impersonate bank customers. Which of the following countermeasures is the BEST way for the bank to mitigate this risk?

Options

  • ARequesting additional identity and address documents for verification
  • BLeveraging AI-based liveness detection during video verification
  • CEncrypting all customer data and communication
  • DDiscontinuing the use of the video-based verification process

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    74% (26)
  • C
    14% (5)
  • D
    9% (3)

Explanation

AI-based liveness detection analyzes video streams in real time to determine whether the subject is a live, physically present person or a synthetic/pre-recorded deepfake - directly countering the attack vector. It fights AI-generated fraud with AI-based detection. Requesting additional documents (A) can also be forged or obtained fraudulently. Encrypting customer data (C) protects data confidentiality in transit and at rest but does nothing to prevent a deepfake from passing identity verification. Discontinuing video-based KYC (D) eliminates a legitimate business capability entirely, which is risk avoidance rather than mitigation.

Topics

#Deepfake detection#Liveness detection#KYC verification#AI risk mitigation

Community Discussion

No community discussion yet for this question.

Full AAIA Practice