nerdexam
Isaca

CISA · Question #347

An IS auditor finds that some employees are using public cloud-based AI tools. Which of the following presents the GREATEST concern?

The correct answer is C. Data leakage. When employees submit data to public cloud-based AI tools, that data - which may include sensitive customer information, financial records, or intellectual property - can be retained, logged, used for model training, or exposed through the vendor's infrastructure. This makes…

Submitted by mike_84· Apr 18, 2026Protection of Information Assets

Question

An IS auditor finds that some employees are using public cloud-based AI tools. Which of the following presents the GREATEST concern?

Options

  • ACopyright infringements
  • BCost overruns
  • CData leakage
  • DData reliability

How the community answered

(34 responses)
  • A
    21% (7)
  • B
    6% (2)
  • C
    62% (21)
  • D
    12% (4)

Explanation

When employees submit data to public cloud-based AI tools, that data - which may include sensitive customer information, financial records, or intellectual property - can be retained, logged, used for model training, or exposed through the vendor's infrastructure. This makes data leakage the greatest risk. Copyright concerns (A) are real but secondary. Cost overruns (B) are unlikely from free/freemium tools. Data reliability (D) is a quality concern, not a security one. The confidentiality risk to organizational data is the primary concern.

Topics

#Data leakage#Cloud security#AI risks#Shadow IT

Community Discussion

No community discussion yet for this question.

Full CISA Practice