AAIR AI Risk Governance And Framework Integration Practice Test 3 — 15 Questions

Question 1

Why is 'AI Literacy' for the board of directors a key component of AI Governance?

Accepted Answer

To enable effective decision-making regarding AI adoption and risk management.. Directors must understand AI risks and benefits to provide informed oversight and define the organization's risk appetite.

Answer

To allow directors to code their own AI models.

Answer

To replace the need for the Chief Risk Officer.

Answer

To reduce the cost of IT infrastructure.

Question 2

When designing an AI Risk Reporting dashboard for senior management, which TWO of the following should be visualized?

Accepted Answer

Status of compliance certifications for high-risk models.. Management needs to see the current risk levels and compliance status in a summarized format.

Answer

Server uptime percentages.

Answer

Raw model prediction scores for every transaction.

Answer

Employee training attendance logs.

Question 3

Which THREE items should be included in an AI 'Risk Assessment' report for a new project?

Accepted Answer

Identification of potential failure modes and their impact.. A complete report covers the risk identification, the impact analysis, and the control strategy.

Answer

The favorite color of the lead developer.

Answer

A list of all competitors currently using the same software.

Question 4

A firm adopts the 'Three Lines of Defense' model for AI. What is the specific responsibility of the 'Third Line' (Internal Audit)?

Accepted Answer

Providing independent assurance on the design and effectiveness of the AI governance framework.. The Third Line provides independent, objective assurance on the effectiveness of the risk management and governance processes.

Answer

Approving AI model deployment.

Answer

Developing the AI models.

Answer

Defining the AI risk appetite.

Question 5

An organization is considering outsourcing its AI development. How should the 'AI Risk Governance' policy be adjusted for third-party vendors?

Accepted Answer

Include mandatory audit rights, model validation requirements, and risk-sharing clauses in the vendor contract.. Third-party risk management must include audit rights and clear accountability for the vendor's models.

Answer

Assume that the vendor's own governance is sufficient.

Answer

Only evaluate the vendor for financial stability.

Answer

Exclude outsourced AI from the internal risk assessment.

Question 6

An organization is evaluating 'Model Risk Management' (MRM) tools for its AI governance. What is the most critical feature to look for to ensure compliance with external regulatory requirements?

Accepted Answer

Comprehensive audit trails of model lineage, versions, and validation results.. Audit trails and model lineage are critical for meeting regulatory transparency and accountability standards.

Answer

Automatic social media integration.

Answer

The ability to run models on mobile devices.

Answer

The ability to add custom skins to the UI.

Question 7

In the context of the AI RMF, what is the significance of the 'Measure' function for risk management?

Accepted Answer

To evaluate the model's performance and risk outcomes against established benchmarks.. The 'Measure' function uses quantitative and qualitative assessments to test whether the model is meeting its goals and risk requirements.

Answer

To identify which employees have access to the AI system.

Answer

To set the budget for future AI projects.

Answer

To provide a score for the developers' performance.

Question 8

What is the primary role of the AI 'Data Steward' within the AI Governance framework?

Accepted Answer

To oversee the lifecycle of the data, ensuring its quality and compliance.. The data steward is responsible for ensuring the quality, security, and ethical use of data throughout the AI lifecycle.

Answer

To manage the budget for AI hardware.

Answer

To build the model architecture.

Answer

To handle marketing and customer relations.

Question 9

Which document defines the 'AI Risk Appetite' for an organization?

Accepted Answer

The AI Risk Appetite Statement.. The AI Risk Appetite Statement is the document approved by the Board that defines the risk tolerance for AI activities.

Answer

The Employee Training Manual.

Answer

The IT Service Catalog.

Answer

The AI Project Status Report.

Question 10

What is the key purpose of the 'Govern' function in the NIST AI RMF?

Accepted Answer

To establish the organizational culture, policy, and procedures for AI risk management.. The 'Govern' function focuses on the culture, policies, and structures that foster a risk-aware AI lifecycle.

Answer

To troubleshoot hardware issues.

Answer

To define the marketing strategy for the AI products.

Answer

To code the AI algorithms.

Question 11

What is the primary benefit of documenting 'AI Model Lineage'?

Accepted Answer

It provides transparency, auditability, and the ability to reproduce models.. Lineage allows for traceability, enabling auditability and root cause analysis in case of a model failure.

Answer

It ensures the model is smaller in file size.

Answer

It helps the marketing team write better ads.

Answer

It makes the model run faster.

Question 12

When an AI model is updated (e.g., retrained on new data), what action is required from an AI Risk Governance perspective?

Accepted Answer

The model should be re-validated to ensure it still meets risk thresholds.. Any significant change to an AI model triggers a re-validation or reassessment to ensure the new version is still within risk thresholds.

Answer

The model should be renamed to show it is a new version.

Answer

No action is needed as the underlying architecture is unchanged.

Answer

The model should be automatically deployed without review.

Question 13

Which THREE items are necessary for a comprehensive 'AI Governance Policy'?

Accepted Answer

Standard Operating Procedures (SOPs) for model lifecycle management.. A policy needs to define roles, risk classification, and the lifecycle process.

Answer

A list of every single line of code in the production models.

Answer

The personal home addresses of all developers.

Question 14

When building an AI Governance framework, which TWO of the following are essential for ensuring enterprise adoption?

Accepted Answer

Integration with existing GRC and software delivery workflows.. Adoption requires alignment with existing processes and clear communication.

Answer

Providing mandatory 40-hour weekly training sessions.

Answer

Using only manual, spreadsheet-based tracking.

Answer

Requiring all developers to be lawyers.

Question 15

Which department is primarily responsible for ensuring AI models comply with data protection regulations like GDPR?

Accepted Answer

The Compliance/Legal Department and the Data Protection Officer.. The Data Protection Officer (DPO) and Legal/Compliance teams are responsible for regulatory compliance.

Answer

The Sales force.

Answer

The Accounting Department.

Answer

The Janitorial staff.