Lesson 105 Quiz: AI Risk and Security

Question 1

Why is AI security broader than simply securing the AI model?

Only the model can create security problems The complete AI application and its connected data, systems, APIs, users, and tools can introduce risk Security is only required for AI systems used by developers AI systems do not need security if they use an external provider

Question 2

What does the principle of least privilege mean for an AI system?

Giving the AI unlimited access to business systems Giving the AI only the permissions required for its approved tasks Removing authentication from the AI application Allowing every employee to access every AI function

Question 3

Why should untrusted content not automatically be treated as trusted instructions?

External content can contain instructions intended to manipulate the AI system All external documents are always inaccurate AI systems cannot read external information Prompt injection only affects traditional databases

Question 4

Why are stronger controls needed when an AI system can take actions in business systems?

Automated actions can increase the consequences of an AI error AI actions never affect business systems Human oversight is never useful for automated actions Automated actions always reduce security risk

Question 5

Which approach provides a strong foundation for managing AI security risk?

Use unlimited permissions and avoid monitoring Understand, classify, restrict, protect, validate, monitor, and respond Focus only on the price of the AI service Deploy first and consider security only after an incident