Isaca AAIA Practice Test Questions Answers

Generative AI tools such as large language models often have token limitations that restrict how much input they can process in a single prompt. According to the AAIA™ Study Guide, when input exceeds token limits, the model processes only the initial portion—leading to biased outputs based on early entries.

“Token limits in generative AI systems may lead to partial input processing, skewing model outputs toward the beginning of the data and introducing interpretive bias. Auditors must assess whether output reflects the full dataset.”

Options A and C describe side effects, but D identifies the most significant risk—output distortion due to truncated input.

Documenting model updates and retraining sessions to ensure traceability (option C) is the hallmark of mature, audit-ready change management in AI. The AAIA™ Study Guide states, “Traceability and documentation of all changes—including retraining events, parameter adjustments, and update rationales—enable effective audit trails, accountability, and regulatory compliance for AI systems.”

While reviews and comparisons are useful, only comprehensive documentation guarantees ongoing transparency and effective management.

Ensuring that AI tools are trained on properly licensed and documented data sets is critical to avoiding copyright infringement and legal exposure. The AAIA™ Study Guide emphasizes using platforms with certified and traceable training data to meet ethical and legal standards.

“Organizations must verify the provenance and licensing of data used to train AI systems. Platforms that certify data sources reduce the risk of using protected intellectual property without consent.”

Manual review (A) is resource-intensive and may not detect embedded copyright violations. Labeling (C) is not sufficient for legal protection. Suspension (D) may be excessive without first attempting remediation. Thus, B is the most strategic and effective recommendation.

The AAIA™ Study Guide emphasizes that AI implementations introduce dynamic and non-deterministic elements into systems, increasing the risk associated with changes. A comprehensive, AI-specific risk assessment is therefore the most critical component of a change management program to ensure that updates, retraining, or parameter adjustments do not introduce vulnerabilities or unintended consequences.

“Risk assessments tailored to AI are crucial because changes to models, training data, or infrastructure can affect performance, ethical compliance, or expose the system to new threats. A standard IT change review is often insufficient.”

While having a governance committee (A) and reviewing documentation (B) are important supporting practices, only option C directly mitigates the core risks of AI system change. Ethics training (D) supports awareness but is not directly tied to change control.

Supervised learning is a foundational type of machine learning in which the model is trained on a labeled dataset. According to the AAIA™ Study Guide, labeled data includes input features along with the correct output, enabling the model to learn the mapping function accurately.

“In supervised learning, models learn from input-output pairs provided in the training data. This method enables predictive modeling tasks such as classification and regression.”

Unlabeled data (A) is used in unsupervised learning; clustered data (B) is a technique rather than a data type; and randomized data (D) refers to distribution strategy, not labeling. Hence, labeled data is the correct answer.