SecAI+ AIBOM Concepts Assessment

1. Which stakeholder group benefits most from AIBOM documentation in a regulated industry?

Compliance officers and security teams conducting risk assessments

Marketing departments planning product launches

Human resources managing payroll

Facilities management scheduling maintenance

2. An effective AIBOM strategy should include documentation of which aspect?

Model provenance, training data lineage, and deployment configuration

Only the AI vendor's company name

Employee personal information

Unrelated business metrics

3. What advantage does AIBOM provide for vulnerability management in AI systems?

Enables rapid identification and patching of affected components

Eliminates all security vulnerabilities automatically

Reduces the need for security monitoring

Prevents all types of cyberattacks

4. Which compliance framework is most likely to require AIBOM-like documentation?

AI-specific regulations emphasizing transparency and accountability

Traditional software licensing agreements only

Marketing industry standards

Office supply procurement policies

5. How should AIBOM documentation be updated in a production AI environment?

Continuously as models, dependencies, and components are updated

Only once during initial deployment

Never, to avoid operational disruptions

Only when security breaches occur

6. What is the relationship between AIBOM and model reproducibility?

AIBOM documentation enables recreation and validation of model behavior

They are unrelated concepts

Only hardware BOMs support reproducibility

Reproducibility requires no documentation

7. An AIBOM can help identify which type of vulnerability?

Outdated or compromised model dependencies and training data contamination

Only network connectivity issues

Printer malfunction risks

Weather-related disruptions

8. Which element should be included in an AIBOM to track data governance?

Data source origin, collection methods, and usage restrictions

Only the final output of the AI model

Employee names and contact information

Office location addresses

9. How does AIBOM support the principle of AI security by design?

By documenting security controls and supply chain components from the start

By adding security measures only after incidents occur

By ignoring security considerations

By focusing solely on performance metrics

10. What is a primary challenge in creating an accurate AIBOM for complex AI systems?

Tracking rapidly changing dependencies and model versions

AIBOMs are simple to create in all scenarios

The challenge only applies to hardware systems

No challenges exist in AIBOM creation

11. What is the primary purpose of an AI Bill of Materials (AIBOM)?

To document all components, dependencies, and supply chain elements of an AI system

To provide marketing materials for AI vendors

To replace traditional software security testing

To eliminate the need for security audits

12. An AIBOM framework helps address which SecAI+ core principle?

Transparency in AI system composition and risk disclosure

Ignoring security best practices

Eliminating all AI systems from organizations

Removing audit trails from systems

13. What is the significance of documenting third-party dependencies in an AIBOM?

It identifies external vulnerabilities and supply chain risks

It has no security relevance

It only matters for hardware systems

It reduces development costs

14. Which of the following should be tracked in an AIBOM to ensure model integrity?

Model version, training dataset provenance, and validation results

Only the model's file size

Marketing budget allocation

Employee vacation schedules

15. How does AIBOM documentation support incident response in AI systems?

By providing a complete inventory to quickly identify affected components and dependencies

By eliminating the need for security monitoring

By replacing incident response teams

By guaranteeing no security incidents will occur

16. What is a key difference between a traditional software BOM and an AIBOM?

AIBOM must document training data, models, and algorithmic dependencies

They are completely identical

AIBOM only tracks hardware components

Software BOMs are more comprehensive than AIBOMs

17. Which regulatory requirement is most directly supported by implementing AIBOM practices?

Compliance with transparency and accountability mandates in AI governance

Elimination of all cybersecurity incidents

Guaranteed 100% system uptime

Automatic vulnerability patching

18. What role does transparency play in AIBOM frameworks?

It enables stakeholders to understand AI system composition and potential risks

It increases system processing speed

It reduces the need for security patches

It eliminates all AI-related vulnerabilities

19. An AIBOM helps organizations identify and manage which type of risk?

Supply chain and dependency vulnerabilities in AI systems

Employee turnover rates

Office equipment maintenance costs

Parking lot capacity issues

20. Which of the following is a critical component that should be included in an AIBOM?

Training data sources and lineage

Marketing campaign metrics

Employee social media handles

Customer email addresses

SecAI+ AI Bill of Materials AIBOM Concepts Quiz