AAIR AI Risk Governance And Framework Integration Practice Test 4 — 15 Questions

Question 1

An organization is using 'AI Model Monitoring' to track 'Concept Drift'. Why is this a risk governance issue?

Accepted Answer

It signals that the model's predictive accuracy is degrading due to changes in the data context.. Concept drift indicates that the model is no longer operating in the environment it was trained for, leading to inaccurate predictions and potential risk.

Answer

It indicates the model is running out of memory.

Answer

It is not a risk issue; it is a maintenance issue.

Answer

It shows that the model is 'thinking' too slowly.

Question 2

A firm is using a 'Red Teaming' exercise for its AI model. How does this fit into the AI Risk Governance framework?

Accepted Answer

It serves as a validation technique to identify vulnerabilities and edge-case risks.. Red Teaming is an advanced 'Measure' or 'Verification' activity designed to find weaknesses, bias, or safety risks in a model.

Answer

It is the only requirement for model governance.

Answer

It is a marketing exercise to show off model robustness.

Answer

It should be performed by the same team that developed the model.

Answer

It is the only requirement for model governance.

Question 3

What is the goal of an AI 'Model Inventory'?

Accepted Answer

To maintain visibility over all AI models and their associated risk profiles.. The inventory provides a central repository for tracking all AI assets, which is the baseline for risk management.

Answer

To automatically delete old models.

Answer

To provide marketing data to competitors.

Answer

To increase the speed of model deployment.

Question 4

When deploying a generative AI model, what 'Governance Control' is most critical for preventing the generation of harmful/inappropriate content?

Accepted Answer

Implement output guardrails and moderation layers.. Guardrails are technical controls placed on top of models to intercept and filter output, which is a vital part of risk governance.

Answer

Increase the number of GPUs to make it faster.

Answer

Only use the model in an internal environment without internet access.

Answer

Allow users to provide feedback directly to the model.

Question 5

Which THREE activities are part of the 'AI Risk Management' lifecycle?

Accepted Answer

Risk Treatment/Mitigation.. The cycle consists of identification, assessment/treatment, and ongoing monitoring.

Answer

Manual approval of all company emails.

Answer

Writing press releases about AI success.

Question 6

What is the first step in performing an AI Risk Assessment?

Accepted Answer

Defining the scope, context, and purpose of the AI system.. The first step is identifying the AI system and defining its intended purpose (Context).

Answer

Hiring a security consultant.

Answer

Updating the company website.

Answer

Running a bias test.

Question 7

In the context of the Three Lines of Defense, which function constitutes the 'Second Line'?

Accepted Answer

The AI Risk Management and Compliance teams.. The second line acts as the risk management and compliance oversight function, separate from the business owners.

Answer

The Internal Audit department.

Answer

The Board of Directors.

Answer

The AI Development team.

Question 8

What is the 'Accountability' principle in the NIST AI RMF intended to address?

Accepted Answer

Ensuring that there is clear ownership and responsibility for AI system performance and safety.. Accountability ensures that individuals or teams are responsible for the outcomes of AI systems, preventing a 'blame-free' environment for AI failures.

Answer

Ensuring the AI can explain itself.

Answer

Making sure the model is free of bugs.

Answer

Ensuring that the AI system is fast.

Question 9

What is the primary risk associated with 'Shadow AI' in an organization?

Accepted Answer

It bypasses established AI risk governance and compliance controls.. Shadow AI refers to AI tools deployed without the knowledge or oversight of the governance team, creating invisible, unmanaged risks.

Answer

It makes the network run slower.

Answer

It costs too much.

Answer

It makes the developers work too hard.

Question 10

How should an 'AI Ethics Committee' interact with the 'AI Risk Governance' body?

Accepted Answer

The Ethics Committee should serve as an advisory body to the governance framework.. The Ethics Committee provides advisory, values-based guidance, while the Governance body maintains decision-making authority for risk.

Answer

The Ethics Committee should be responsible for coding the AI.

Answer

The Ethics Committee should have final veto power over all projects.

Answer

The Ethics Committee should replace the Risk Governance body.

Question 11

Which THREE factors should be evaluated when reviewing an AI model for 'Fairness'?

Accepted Answer

Performance disparity across different demographic cohorts.. Fairness assessment covers data representation, metric definitions, and outcome disparities.

Answer

The number of hours the server was powered on.

Answer

The model's file size in kilobytes.

Question 12

A firm is integrating AI into its ERM (Enterprise Risk Management). What is the primary benefit of a 'Common Risk Taxonomy' for AI?

Accepted Answer

It ensures consistent risk identification, communication, and reporting across the organization.. A common taxonomy ensures that AI risk is understood and communicated consistently across the enterprise.

Answer

It forces all AI models to be identical.

Answer

It makes AI code easier to write.

Answer

It eliminates the need for risk assessments.

Question 13

Why is 'Model Validation' (distinct from testing) essential in an AI Governance framework?

Accepted Answer

To provide independent assurance that the model performs as expected and within risk thresholds.. Validation is the independent verification that a model meets its intended purpose and risk performance requirements.

Answer

To ensure the developers have followed the coding standards.

Answer

To save money on cloud hosting.

Answer

To speed up the coding process.

Question 14

Which of the following is an example of an 'AI Risk' in a customer-facing service?

Accepted Answer

A chatbot providing inaccurate information to a customer.. An AI chatbot producing hallucinated information is a clear AI risk involving inaccuracy and potential harm.

Answer

The CEO deciding to change the corporate strategy.

Answer

The office printer running out of ink.

Answer

A scheduled maintenance window for the website.

Question 15

When reporting to the Board, what is the best way to present 'AI Risk'?

Accepted Answer

Link AI risks to overall business impact, strategic goals, and current risk appetite.. Risk should be linked to strategic objectives and the organization's appetite to ensure the Board understands the impact.

Answer

State that AI is completely safe and requires no oversight.

Answer

Provide a list of all model parameters.

Answer

Give a 4-hour technical lecture on deep learning.