ISACA Advanced in AI Security Management Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  The technology in use could be defeated by many forms of attacks - deepfake is just one of it. the causation of it is lack of checks within the payment systems that causes failures

• Chose B3

  Deepfake-enabled payment diversion attacks succeed not because employees lack awareness, but because the payment process is vulnerable to social engineering and impersonation. The strongest protection is robust, multi-factor, out-of-band approval workflows, such as: Dual-control or multi-party payment authorization Independent verification for unusual or urgent requests Non-spoofable verification channels (e.g., call-back to a known number) Threshold-based approvals and segregation of duties Strict exception handling governance These controls prevent fraudulent payments even if a deepfake is convincing. This aligns with leading practices from NIST, SWIFT CSP, and financial fraud prevention standards.