ISACA Certified Artificial Intelligence Auditor (CAIA) — Question 37

A data loss prevention (DLP) system was recently implemented to identify data retention policy compliance. Which of the following would be the BEST use of AI to collect evidence?

Answer options

• A. Document blockchain immutability as evidence of data integrity.
• B. Redirect workflows through automated monitoring tools.
• C. Deploy analytics to identify suspicious data transactions.
• D. Apply natural language queries to identify sensitive information.

Correct answer: D

Explanation

The correct answer, D, is effective because natural language queries can directly identify and classify sensitive information, which is crucial for compliance. Options A, B, and C, while useful in different contexts, do not directly contribute to the collection of evidence regarding data retention policy compliance as effectively as option D.