nerdexam
Isaca

AAISM · Question #155

Which of the following BEST strengthens information security controls around the use of generative AI applications?

The correct answer is B. Monitoring AI outputs against policy. Monitoring AI outputs against policy (B) is the most direct and continuous control for strengthening information security around generative AI use. It detects policy violations, harmful outputs, data leakage, and misuse in real time. Exceeding industry benchmarks (A) is a benchma

AI Security Operations and Monitoring

Question

Which of the following BEST strengthens information security controls around the use of generative AI applications?

Options

  • AEnsuring controls exceed industry benchmarks
  • BMonitoring AI outputs against policy
  • CImplementing a kill switch
  • DValidating AI model training data

How the community answered

(44 responses)
  • A
    5% (2)
  • B
    75% (33)
  • C
    14% (6)
  • D
    7% (3)

Explanation

Monitoring AI outputs against policy (B) is the most direct and continuous control for strengthening information security around generative AI use. It detects policy violations, harmful outputs, data leakage, and misuse in real time. Exceeding industry benchmarks (A) is a benchmark activity, not an operational control. A kill switch (C) is a reactive, last-resort measure - not a proactive strengthening control. Validating training data (D) improves model quality but does not govern how the AI is used in production or what it produces day-to-day.

Topics

#AI Security Controls#Generative AI Risks#Output Monitoring#Policy Compliance

Community Discussion

No community discussion yet for this question.

Full AAISM Practice