AAIA exam questions: format, samples and practice

People who search for AAIA exam questions usually want two things: to see what the questions look like, and to practice on them before the exam. This guide does both. It takes the format from ISACA's own description, shows which words in a question decide its answer, works through three original questions in the exam's shape with full rationales, lists what ISACA itself offers for practice, and explains why the "exam questions" some sites sell can cost you the certification instead of earning it.

The short answer

• One format only. "Every question has a stem (question) and four options (answer choices)", and "All questions are designed with one best answer."
• The stem varies. "The stem may be in the form of a question or incomplete statement."
• A qualifier often decides. The guide names "MOST likely or BEST", and ISACA's own free quiz also uses FIRST and PRIMARY.
• 90 questions, not all scored. Some are pre-test items that "are not used to calculate your exam score", and ISACA does not say how many.
• Guessing costs nothing. "There are no penalties for incorrect answers."
• ISACA offers a free quiz of 12 questions, a paid question database, and member study groups.
• Questions from the exam itself are off limits. ISACA's rules forbid retaining or sharing exam content, and ISACA says sites offering "live" questions are "either deceptive or violating copyright laws".

How ISACA builds an AAIA question

The candidate guide gives the purpose first: "Exam questions are developed with the intent of measuring practical knowledge and the application of general concepts and standards." Then the shape, in three lines:

• "Every question has a stem (question) and four options (answer choices)."
• "Choose the correct or best answer from the options."
• "The stem may be in the form of a question or incomplete statement."

ISACA describes how its exam questions are written in general terms, not for the AAIA alone. Its item-writing page invites "certified practitioners to submit potential exam questions", and says that "Submitted items go through a rigorous review process by a panel of certified subject matter experts." Questions that pass go into ISACA's banks: "Items accepted by the working group go directly into our exam banks." The page's writing guides are for other certifications, and it describes no process of the AAIA's own.

For the AAIA itself, the content outline shows the point of view: of its 23 supporting tasks, 21 begin with the word "Evaluate". Most AAIA questions put you in the auditor's chair and ask you to judge what an organization has done with AI, which control is missing, what the evidence shows, what should happen next. The AAIA exam content outline explained groups all 23 tasks.

The words that decide the answer

Because every question has one best answer, the options are rarely a single right answer among three absurd ones. More often two or three are reasonable, and one word in the stem decides between them. The guide's tip: "An exam question may require you to choose the appropriate answer based on a qualifier, such as MOST likely or BEST." ISACA's free quiz uses others too, FIRST and PRIMARY among them.

Each qualifier asks a different question:

• FIRST asks for order. Several options may be right eventually; the answer is the one that has to come before the rest.
• MOST and GREATEST ask for weight. Every option may be a real concern; the answer is the one with the most impact.
• BEST asks for fit. The answer is the option that solves the stated problem most completely, within the role the stem gives you.
• PRIMARY asks for purpose or cause: the main reason, not every reason.

The guide's practical advice works for all of them: "Read the question carefully, eliminate known incorrect answers and then make the best choice possible."

Three AAIA practice questions

Each question below is written in the exam's shape, with a rationale that explains the answer and why each other option falls short. Two come from AI Operations, the largest domain at 46% of the exam, and one from AI Auditing Tools and Techniques.

An attack on a moderation model

A model taken somewhere new

A recommendation that stays in role

What ISACA offers for practice

ISACA publishes one free set of AAIA questions and sells a larger one.

• The free practice quiz. ISACA's AAIA page offers it in a line: "Test your knowledge with these 12 free questions." The quiz page says the questions come from ISACA's test prep products and are at "the same level of difficulty you can expect" on the exam, and you see your results after submitting a short form. It is the closest look you can get at ISACA's own writing, so take it, ideally once early and once near the end. We link it rather than reprint it: ISACA's AAIA practice quiz.
• The question database. ISACA's AAIA page describes "a comprehensive 200+ question database", and its store calls it "a 6-month subscription with the option to purchase a subscription extension", at US$249 for members and US$349 for nonmembers when we checked on October 26, 2026. Every other fee is in what the AAIA costs.
• Study groups. For members, ISACA runs AAIA study groups, an online forum where you can "Answer practice questions and get help from experts for free".

Why dumps put your result at risk

Searches for AAIA exam questions also turn up sites that claim to post questions from the exam itself, often labeled dumps and posted with discussion threads. ISACA's rules are unambiguous about using them.

When you register, you accept ISACA's terms, and the candidate guide lists what they prohibit. Among them: "Copy, photograph, record, memorize or otherwise attempt to retain or recreate any Exam content, or assisting anyone to retain, recreate or reconstruct Exam content for any purpose." The same list bans sharing exam content "through any other method of communication including but not limited to the Internet, email, or through any online forum." The AAIA page adds that "ISACA has a zero-tolerance policy for fraudulent test taking activities."

ISACA's article on exam fraud, "Candidates Beware", is direct about such sites: "websites that offer access to supposed “live” test questions are either deceptive or violating copyright laws, and this would be considered a breach of the test-taker agreement." It also describes how ISACA finds people who used them, a data forensic analysis aimed at candidates who "(knowingly or unknowingly) studied/memorized breached items", and the result so far: "ISACA has nullified over 200 exam scores since the implementation of this analysis process." The consequences do not stop at the exam: "Certifications received based on nullified exam scores will be revoked and the candidate can be banned from future ISACA exams or face legal prosecutions for copyright infringement or fraud."

There is also a plainer problem. A page of memorized answers teaches you nothing about judging the next question, and the AAIA is built from questions that test judgment.

How to practice with questions

Questions teach most when the way you use them matches the exam. A sequence that works:

1. Learn a topic, then test it. Answer a topic's questions untimed, right after studying it, and read every rationale, including those for questions you got right. A lucky right answer teaches nothing.
2. Argue with the wrong options. Before reading a rationale, say why each wrong option is wrong. On an exam where most options are plausible, ruling three out is the skill being tested.
3. Mix the topics. Once each topic has been covered, practice in mixed sets, because the exam draws from all 17 at once and does not tell you which one a question comes from.
4. Add the clock. Move to timed sets at the exam's pace, about 100 seconds a question, and practice moving on from a question you cannot settle.
5. Take full mocks. Run at least one full mock under exam conditions: 90 questions, 150 minutes on one clock, no notes, and any break taken out of the time. AAIA practice exam sets out how to take one and how to review it.
6. Track the domains. Your results by domain show where to study next, much as ISACA's score report shows results by domain for information.

One rule runs through all of it: learn why an answer is right, and never memorize questions, ours or anyone else's. A memorized answer is no use on a question you have not seen; the judgment you built answering it is.

How our practice questions are written

Every question in our AAIA course is original, written to the 17 topics of ISACA's exam content outline; none is ISACA's, and none is AAIA exam content. QualExam is an independent study resource, not one of ISACA's Accredited Training Organizations, and is not affiliated with, endorsed by, or sponsored by ISACA.

The course holds 619 questions across the 17 topics, each with a rationale that explains why the right answer is right and why each of the other three falls short. The timed mock runs 90 questions on one 150-minute clock and draws each domain at its share of the exam, 30, 41 and 19 questions. A short diagnostic of 18 questions asks across all 17 topics, so your study plan starts from where you actually stand.

Where to start

The quickest way to see whether these questions suit you is to answer some. A free account opens AI models and requirements in full: its lessons, its 60 questions with rationales, and its flashcards, with your progress kept. Our AAIA practice page shows how the 619 questions spread across the topics, and full access is a single payment with nothing to renew. Take ISACA's free quiz as well; between the two you will know what an AAIA question asks of you. For the timing and the scoring, see AAIA exam format and scoring.