試験AAIA-JPN トピック1 問題132 スレッド

The GREATEST risk is thatsensitive internal contentmay be embedded in AI prompts and sent to an external system (A), exposing confidential or regulated information. Retrieval-augmented generation often involves sending queries or embeddings to third-party APIs, creating a significantdata leakagerisk if internal context is included.
Option B deals with training-data leakage, which is notable but less immediate. Option C is irrelevant to the core risk. Option D concerns operational reliability, not security. In AAIA, protection of internal audit evidence and sensitive data is paramount, and theprimary threat is external disclosure through prompts.
References:
ISACA,AAIA Exam Content Outline- Domain 5: Data Protection, AI Privacy Risks.