Free ISACA AAIR Practice Test Questions and Answers (2026)

When an AI model's accuracy declines despite stable input distributions, the most likely cause is

concept drift—where the underlying relationship between inputs and the target variable changes

over time. In credit scoring, this may occur when economic conditions, consumer behavior, or risk

patterns shift in ways not captured in the original training data.

Why C is Correct: The ISACA AAIR model drift guidance identifies concept drift as the greatest risk in

this scenario because it means the model is making credit decisions based on relationships that no

longer hold in the current environment. Faulty credit decisions can lead to incorrect denials of

creditworthy applicants, incorrect approvals of high-risk applicants, regulatory violations, financial

losses, and harm to individuals—all high-severity consequences for a credit-scoring application.

Why A is Wrong: Technical delays in credit score updates are an operational performance concern.

Delays create business friction but do not cause the fundamental accuracy problem described in the

scenario.

Why B is Wrong: Underfitting from shortened training cycles is a model development quality issue.

The scenario specifies stable input distributions and declining accuracy—characteristic of drift, not

underfitting, which would manifest differently.

Why D is Wrong: Increased retraining costs represent a financial efficiency concern. While budgetary

impacts are real, they are secondary to the risk of faulty credit decisions affecting individuals and

regulatory compliance.

Chatbot accuracy in customer service depends on correctly identifying customer intent and

generating appropriate responses. Both intent classification accuracy and training data quality

directly determine chatbot performance over time.

Why D is Correct: According to ISACA AAIR model performance management guidance, measuring

intent-classification error rates provides precise diagnostic information about where the chatbot

misunderstands customer inquiries, while refining training datasets based on those errors

continuously improves classification accuracy. This closed-loop approach—measure specific errors,

improve the underlying data that drives them—is the most effective mechanism for sustained high

accuracy.

Why A is Wrong: Increasing model temperature increases output randomness and diversity, which is

counterproductive for accuracy in customer service contexts where consistent, precise answers are

required. Precision and recall provide useful metrics but increased temperature actively undermines

accuracy.

Why B is Wrong: Vendor benchmarking compares performance against generic standards. Customer

service chatbots must be optimized for the specific organization's terminology, products, and

customer base—generic thresholds may not capture the accuracy requirements of a specific

deployment.

Why C is Wrong: Explainable AI techniques improve decision transparency but do not directly

enhance classification accuracy. Code reviews address software quality, not the model's ability to

accurately interpret customer intent.

Third-party AI suppliers introduce significant risk through model updates, changes in training data,

and modifications to system behavior. Contractual disclosure requirements ensure the acquiring

organization can maintain active risk oversight despite not controlling the vendor's development

processes.

Why B is Correct: The ISACA AAIR framework emphasizes that third-party AI contracts must protect

against harms arising from undisclosed changes. When vendors make silent updates to models, the

acquiring organization cannot assess new risks before they affect users, decisions, or regulated

outcomes. Timely disclosure requirements enable proactive risk detection and mitigation before

individuals are harmed.

Why A is Wrong: Availability guarantees are service-level concerns addressed by SLA provisions.

While important operationally, they do not address the risk management imperative of

understanding what changes have been made to AI models.

Why C is Wrong: Internal trust-building is a change management consideration, not the primary

purpose of contractual disclosure requirements. Contracts address risk obligations, not

organizational confidence.

Why D is Wrong: Vendor staff access to sensitive datasets is a data access and privacy concern

addressed through data processing agreements and access controls, not model update disclosure

requirements.

Organizational culture is primarily shaped by leadership behavior and tone at the top. In AI

governance, an ethical culture cannot be mandated through documentation alone—it must be

demonstrated through the actions and values of organizational leaders.

Why D is Correct: The ISACA AAIR Study Guide emphasizes that tone at the top is the most powerful

driver of ethical culture. When leaders consistently model ethical behavior in AI development and

usage, they create a normative environment where employees internalize values rather than merely

complying with rules. This authentic leadership approach produces sustainable cultural change.

Why A is Wrong: Checklists are compliance tools that address process adherence, not cultural

transformation. A checklist culture can produce box-ticking behavior without genuine ethical

commitment.

Why B is Wrong: Conference participation raises awareness but has minimal impact on day-to-day

organizational behavior. External networking does not directly shape internal culture.

Why C is Wrong: Disciplinary actions represent reactive compliance enforcement. While necessary,

punitive measures create a compliance-driven rather than values-driven culture, which is less robust

and sustainable.

AI governance across diverse applications requires frameworks flexible enough to accommodate

varying risk profiles, regulatory environments, and operational contexts while maintaining consistent

governance standards. Rigid or overly centralized approaches reduce operational effectiveness.

Why B is Correct: The ISACA AAIR framework advocates for adaptable governance frameworks that

can be scaled and tailored to specific AI use cases. A risk-based, adaptable framework applies more

rigorous controls to high-risk applications while allowing operational flexibility for lower-risk uses.

This balance enables innovation while maintaining appropriate risk oversight—a core principle of

proportionate AI governance.

Why A is Wrong: Single-regulation compliance focus creates compliance tunnel vision that may miss

material risks not covered by that regulation. AI governance must address the full risk landscape, not

just one regulatory framework.

Why C is Wrong: External consultants provide periodic independent assurance, not governance.

Relying on external reviews for governance would be episodic rather than continuous, creating

governance gaps between review cycles.

Why D is Wrong: Centralized decision-making creates operational bottlenecks and slows AI

deployment. Effective governance delegates decision authority appropriately while maintaining

oversight, rather than centralizing all decisions in a single function.

Synthetic data is generated algorithmically to resemble real data while protecting individual privacy.

However, synthetic data generation processes may not perfectly capture the full statistical diversity

of real-world populations—particularly rare conditions, edge cases, and underrepresented

demographic groups.

Why A is Correct: According to ISACA AAIR data quality guidance for AI, the greatest risk of training

on synthetic data is that it may not reflect real-world diversity. In healthcare, this is particularly

consequential because AI models trained on non-diverse synthetic data may perform poorly for

patient populations not well-represented in the original real data—potentially producing inaccurate

diagnoses or treatment recommendations for vulnerable groups, perpetuating health inequities.

Why B is Wrong: While reduced diversity could contribute to increased false negatives in some

scenarios, this is a specific manifestation of the broader diversity problem. The root cause—lack of

real-world representativeness—is the more fundamental and comprehensive risk.

Why C is Wrong: Regulatory noncompliance from synthetic data use depends on jurisdiction-specific

requirements. Many regulations explicitly encourage synthetic data to protect privacy. While

compliance must be verified, it is not the greatest inherent risk of synthetic data quality.

Why D is Wrong: Synthetic data generation occurs in controlled internal environments and is not

inherently more susceptible to data poisoning than other data types. Poisoning risk is a function of

data pipeline controls, not whether data is synthetic or real.

Deep learning models have numerous hyperparameters—learning rate, batch size, regularization

parameters, network architecture choices—that control how the model learns from data. Fine-tuning

these parameters optimizes model performance for the specific dataset and task requirements.

Why D is Correct: According to ISACA AAIR model development guidance, when a large volume of

relevant data is already available, hyperparameter fine-tuning is the most effective technique for

ensuring the model meets organizational needs. It systematically optimizes the learning process to

maximize performance on the specific problem, calibrating accuracy, generalization, and efficiency to

the organization's requirements.

Why A is Wrong: A federated accountability model is a governance structure, not a technical method

for optimizing AI performance. It addresses how responsibility is distributed, not how the model

learns.

Why B is Wrong: Unsupervised learning is a class of ML approaches used when labeled data is

unavailable. It does not address optimization of a deep learning model where relevant data is already

present.

Why C is Wrong: Data augmentation artificially expands training datasets through transformations—

useful when data is scarce. With a large volume of relevant data already available, augmentation

provides minimal additional benefit and hyperparameter optimization becomes the more impactful

intervention.

Traditional intellectual property law was designed for human-created works. AI-generated content

sits in a legal grey zone because current copyright frameworks in most jurisdictions do not clearly

establish who—if anyone—holds copyright in outputs created autonomously by AI systems.

Why C is Correct: According to ISACA AAIR, the lack of regulatory clarity around AI-generated content

copyright is the greatest IP challenge because it creates fundamental uncertainty about ownership,

transferability, and enforceability of rights in AI outputs. Without clear legal status, organizations

cannot confidently assert ownership, license AI-generated materials, or prevent competitors from

copying outputs. This uncertainty pervades commercial agreements, licensing strategies, and

competitive protection.

Why A is Wrong: Zero-data retention policies actually protect intellectual property by ensuring

vendor systems do not retain proprietary input data. This represents a protective measure, not a

challenge.

Why B is Wrong: Training material customization for confidential data handling is a workforce

education challenge. While important for data protection, it does not represent the primary IP

challenge from AI-generated content.

Why D is Wrong: Low-risk use cases like administrative tasks present minimal IP concerns because

the outputs are typically not commercially significant or protectable. The IP challenge is greatest for

creative, analytical, and proprietary outputs.

Model poisoning attacks target the training data or model parameters to degrade performance or

introduce malicious behavior. Supply chain tampering introduces compromised components at

vendor or integration stages. Security by design principles require embedding defenses against these

threats from the earliest design stages.

Why C is Correct: According to ISACA AAIR security by design guidance, adversarial resilience and

data integrity controls address both model poisoning and supply chain tampering at their root.

Adversarial resilience training prepares the model to resist maliciously crafted inputs. Data integrity

controls—cryptographic signing, provenance tracking, integrity verification—detect tampering in

training data and model artifacts across the supply chain. Together, these form the most

comprehensive defense against both attack categories.

Why A is Wrong: Data refreshes with checksums detect post-hoc data corruption but do not build

adversarial resilience into the model itself. Checksums verify file integrity but cannot prevent

poisoning attacks that maintain file integrity while altering data content.

Why B is Wrong: Frequent retraining and bias monitoring address performance drift and fairness but

do not specifically protect against deliberate tampering. A retrained model may still be trained on

poisoned data if integrity controls are absent.

Why D is Wrong: Data tokenization protects sensitive field values from unauthorized access (a privacy

control) but does not address model poisoning or supply chain tampering, which can occur without

accessing or exposing the sensitive field values themselves.

Inconsistent data reliability from external feeds undermines model accuracy and creates auditability

challenges. The solution requires both understanding where data comes from (provenance) and

verifying its quality before it enters the model's learning process (stage gate reviews).

Why C is Correct: The ISACA AAIR data quality governance guidance identifies establishing data

provenance and implementing stage gate quality reviews as the comprehensive approach to

managing inconsistent external data reliability. Provenance tracking records the origin, processing

history, and chain of custody of each data source, enabling quality issues to be traced to their source.

Stage gate reviews enforce quality standards at defined points in the data pipeline, preventing

unreliable data from advancing to model training.

Why A is Wrong: Weighting historical data over recent samples introduces temporal bias and

prevents the model from reflecting current real-world conditions—the opposite of what most AI

applications require. This trade-off may be appropriate in specific contexts but is not a general

mitigation for inconsistent data reliability.

Why B is Wrong: Updating model versions improves model architecture and training processes but

does not resolve the underlying external data quality problems. The model update cannot

compensate for ingesting unreliable data.

Why D is Wrong: Reducing data source diversity sacrifices the breadth of information that diverse

feeds provide, potentially reducing model performance and representativeness. The goal is to ensure

consistent quality from diverse sources, not to reduce diversity.