AAIA Practice Test 7 — 10 Questions

Question 1

You are assessing 'Model Security'. Which attack vector specifically exploits the AI training phase?

Accepted Answer

Data poisoning. Data poisoning involves injecting malicious data into the training set to influence the model's behavior.

Answer

Man-in-the-middle attack

Answer

Denial-of-service attack

Answer

Phishing attack

Question 2

During an audit of AI procurement, you find that the 'Vendor AI Assessment' questionnaire is missing. What is the correct next step?

Accepted Answer

Immediately halt the use of the vendor until a formal risk assessment is completed. An auditor must ensure that third-party AI risks are evaluated using a formal, documented process.

Answer

None of the above

Answer

Update the office building safety guidelines

Answer

Ask the vendor for their marketing presentation

Answer

Ignore the missing document if the vendor is well-known

Question 3

Which THREE components are critical for a robust 'AI Governance' framework?

Accepted Answer

Established AI ethics and compliance policies. Effective governance requires policy, accountability, and continuous monitoring.

Answer

Increasing the size of the marketing team

Answer

Choosing the most expensive cloud platform

Question 4

When auditing an 'AI Model Lifecycle', which phase occurs immediately after the 'Model Training' phase?

Accepted Answer

Model Validation. After training, the model must be validated before it is deployed to production.

Answer

Writing the initial requirements

Answer

Marketing the model to customers

Answer

Decommissioning

Question 5

You are reviewing a model risk management (MRM) framework for an AI system using NVIDIA NeMo Guardrails. What is the primary purpose of this tool in a risk mitigation strategy?

Accepted Answer

To enforce safety boundaries on LLM inputs and outputs. NeMo Guardrails allows developers to define programmatic boundaries for LLM behavior, effectively serving as an automated control for AI governance.

Answer

To automate model retraining

Answer

To improve model training speed

Answer

To encrypt training datasets

Question 6

What is the primary function of a 'Canary Deployment' in AI model release?

Accepted Answer

Gradual rollout to test stability. Releasing the new model to a small subset of traffic to monitor performance before full rollout.

Answer

To update documentation

Answer

To delete old models

Answer

To increase training performance

Answer

To encrypt model weights

Question 7

In an AI Audit, what does 'Model Fairness' assessment typically involve?

Accepted Answer

Disparity analysis across segments. Checking for bias across protected groups (e.g., race, gender) in model performance metrics.

Answer

Counting model parameters

Answer

Checking model speed

Answer

Verifying code documentation

Question 8

Which TWO are standard practices for securing AI model endpoints?

Accepted Answer

Mutual TLS (mTLS). Security requires network and authentication controls.

Answer

Unprotected endpoints

Answer

Storing logs on public S3

Answer

Public internet access

Question 9

What is the primary function of an 'AI Ethics Board'?

Accepted Answer

Reviewing AI projects for alignment with corporate values and societal norms. The ethics board ensures that AI projects align with corporate values and societal standards.

Answer

Managing the HR payroll systems

Answer

Fixing bugs in the server infrastructure

Answer

Writing the code for all production models

Question 10

Which AI risk is best mitigated by conducting a 'bias audit' on the training dataset?

Accepted Answer

Unfairness and discrimination in model outputs. Bias audits analyze datasets for underrepresented groups or historical prejudices that would lead to discriminatory outputs.

Answer

Hardware overheating

Answer

System latency

Answer

Server cost overruns