AAIA Practice Test 7 — 10 Questions

Question 1

You are assessing a company's 'AI Governance Committee'. Which action best demonstrates effective board-level oversight?

Accepted Answer

Approving the annual AI strategy and corresponding risk mitigation plans. Board-level oversight in an AI Governance Committee centers on strategic direction and risk appetite, not operational execution. Approving the annual AI strategy and its corresponding risk mitigation plans is a fiduciary, governance-level action that sets direction, allocates accountability, and ensures risk is managed at the highest level. This mirrors how boards approve corporate strategy and enterprise risk registers rather than getting involved in tactical decisions.

Answer

Managing the day-to-day procurement of data labeling services

Answer

Reviewing individual code commits for AI model training

Answer

Selecting the machine learning framework used by data scientists

Question 2

What is the risk of 'Feature Skew' in an AI pipeline?

Accepted Answer

Incorrect model predictions. Feature skew (also called training-serving skew) occurs when the feature values used at training time differ from those computed at inference time — for example, different preprocessing, aggregation windows, or data sources. Because the model learned relationships based on the training distribution, mismatched inputs at serving time cause it to produce incorrect predictions. This is a data/feature consistency problem, not an infrastructure failure.

Answer

Database corruption

Answer

Increased hardware costs

Answer

System crash

Question 3

What is the most effective way to address 'Adversarial Input' during inference?

Accepted Answer

Adversarial training and input filtering. Implementing input validation/sanitization and adversarial training (training on adversarial examples) improves robustness.

Answer

Reducing training time

Answer

Increasing model depth

Answer

Ignoring the input

Question 4

For a production LLM deployment, which operational metric is most critical to monitor to identify 'hallucination' or grounding failure in real-time?

Accepted Answer

Context faithfulness score. Retrieval metrics, specifically faithfulness or answer relevance, indicate if the model is hallucinating outside of retrieved context.

Answer

Throughput (TPS)

Answer

Token generation latency

Answer

Error code distribution

Answer

Memory footprint

Question 5

You are auditing a model's 'Data Pre-processing' step. Which practice is a major concern regarding data privacy?

Accepted Answer

Storing training data that can be re-identified without proper access controls. Storing training data that can be re-identified without proper access controls is the core privacy risk: even 'anonymized' datasets can often be re-linked to individuals via quasi-identifiers, and without RBAC, encryption, or tokenization, that data becomes a direct PII exposure. Auditors flag this because it violates data-minimization and purpose-limitation principles.

Answer

Documenting the transformations applied to the data

Answer

Compressing the data to save storage costs

Answer

Using open-source data transformation libraries

Question 6

Which THREE factors should an auditor consider when evaluating the suitability of an AI model for production?

Accepted Answer

Inference latency and throughput. Option A (Inference latency and throughput) is correct because production suitability depends on whether the model can serve requests within required response-time SLAs and handle the expected request volume, making latency and throughput key operational metrics. Option C (Fairness and bias metrics) is correct because an auditor must verify that the model does not produce discriminatory or skewed outcomes across protected groups, which is a core governance and compliance concern. Option D (Model accuracy metrics) is correct because accuracy, precision, recall, F1, or similar performance measures determine whether the model reliably performs its intended task in production. Options B (Developer age demographics) and E (Operating system color schemes) are irrelevant to model suitability, as neither affects the model's performance, fairness, or operational viability.

Answer

Developer age demographics

Answer

Operating system color schemes

Question 7

Which TWO of the following are core components of an AI incident response strategy?

Accepted Answer

Defined communication protocols for internal and external stakeholders. Option B is correct because a core part of any AI incident response strategy is having defined communication protocols that specify how internal teams (e.g., security, legal, engineering) and external stakeholders (e.g., customers, regulators) are notified during an AI-related incident, ensuring timely and coordinated disclosure. Option D is correct because procedures for rolling back or disabling the model are essential containment and remediation mechanisms—if an AI model behaves harmfully or is compromised, responders must be able to revert to a prior version or shut it down to stop the impact. In contrast, option A (marketing campaigns for AI product launches) relates to go-to-market activities, not incident response. Option C (software license management for all developers) is a compliance and asset-management concern, not an incident response component. Option E (automated email server maintenance) is routine IT operations and unrelated to handling AI incidents.

Answer

Marketing campaigns for AI product launches

Answer

Software license management for all developers

Answer

Automated email server maintenance

Question 8

Which THREE of the following are core components of a robust AI Governance and Risk Assessment Framework?

Accepted Answer

Standardized model risk assessment templates. A robust AI Governance and Risk Assessment Framework requires standardized model risk assessment templates (B) so that every AI/ML model is evaluated consistently against the same criteria, such as fairness, explainability, robustness, and data quality, enabling comparable and auditable risk scoring across the model portfolio. It also requires defined AI risk appetite and threshold levels (D), because governance depends on explicit, approved boundaries that determine which risks are acceptable and trigger escalation, mitigation, or rejection decisions. Finally, it requires clearly assigned roles and responsibilities for model ownership and accountability (E), since frameworks such as NIST AI RMF and ISO/IEC 42001 rely on named accountable owners (e.g., model owners, validators, and oversight committees) to enforce controls and remediation. Network bandwidth optimization plans (A) are an infrastructure/performance concern, not a governance or risk-assessment component, and automated model training hyperparameter tuning (C) is an MLOps/model-development activity that improves model performance but does not establish governance, risk appetite, or accountability structures.

Answer

Network bandwidth optimization plans

Answer

Automated model training hyperparameter tuning

Question 9

Which role is primarily responsible for ensuring that the AI governance framework is followed in daily operations?

Accepted Answer

The Model Manager or Product Owner. The Model Manager or Product Owner is accountable for the day-to-day adherence to the AI governance framework, ensuring that models are developed, deployed, and monitored according to policy. This role bridges governance requirements and operational execution, making it the primary owner of daily compliance. They coordinate with data scientists, engineers, and risk teams to enforce controls.

Answer

The company's external auditor

Answer

The office manager

Answer

The chief financial officer

Question 10

During an AI audit, what is a 'PII Scrubber' tool used for?

Accepted Answer

Anonymizing sensitive data. A PII Scrubber is used to detect and anonymize personally identifiable information such as names, addresses, SSNs, and emails so that sensitive data can be used in AI training or analysis without exposing individuals. It supports privacy compliance by removing or masking identifiers before data flows into models or logs. This is a core privacy-preserving control in AI audits.

Answer

Cleaning up logs

Answer

Compressing images

Answer

Improving accuracy