AAIR AI Risk Program Management Practice Test 4 — 15 Questions

Question 1

Which THREE areas should be covered in an AI risk management program?

Accepted Answer

Model performance and accuracy. Comprehensive AI programs address technical, legal, and operational risks.

Answer

The office floor plan

Answer

The color of the company logo

Question 2

Which THREE metrics should be tracked to assess the 'Risk' of an AI model in production?

Accepted Answer

Model accuracy/error rate. Risk is measured by performance stability (drift), accuracy, and operational health.

Answer

The brand of the coffee machine

Answer

The number of employees in the break room

Question 3

Which TWO strategies are recommended for 'Mitigating' AI model bias?

Accepted Answer

Applying fairness constraints during model training. Mitigation involves both pre-processing (data) and in-processing (training) techniques.

Answer

Removing all data from the database

Answer

Asking the user to manually fix the bias

Answer

Ignoring the bias and hoping it goes away

Question 4

Which TWO factors should be documented in an AI Model Card?

Accepted Answer

Intended use cases. Model cards are designed to inform users about the model's performance and usage limits.

Answer

The developer's favorite snacks

Answer

The current stock price of the company

Answer

The employee handbook for new hires

Question 5

Which THREE roles should have oversight authority in the AI Risk Program?

Accepted Answer

Chief Technology Officer. Oversight requires representatives from business, technology, and risk management.

Answer

The company's social media influencer

Answer

The office receptionist

Question 6

Which TWO actions are required to manage 'Third-Party' AI risks?

Accepted Answer

Performing due diligence on the vendor's AI risk practices. Management requires due diligence and contractual oversight.

Answer

Ignoring the vendor's feedback

Answer

Allowing the vendor to set their own rules

Answer

Asking the vendor for their cafeteria menu

Question 7

Which TWO teams should be involved in the initial risk review for an AI chatbot?

Accepted Answer

Data Science/ML Engineering. Chatbots interact directly with users, requiring input from Legal (for compliance) and Data Science (for technical behavior).

Answer

The company mailroom staff

Answer

The local fitness coach

Answer

The custodial cleaning staff

Question 8

Which TWO items are considered 'AI Infrastructure' risks?

Accepted Answer

Unauthorized access to the model environment. Infrastructure risks focus on availability and security of the compute environment.

Answer

The color of the server room walls

Answer

The type of desk chair in the office

Answer

The number of windows in the office

Question 9

Which THREE types of 'Bias' need to be managed in an AI project?

Accepted Answer

Measurement bias (data collection). Common forms of AI bias include sampling, measurement, and algorithmic bias.

Answer

The bias towards free coffee

Answer

The bias of the local weather

Question 10

Which TWO aspects of 'Data Governance' are critical for AI risk management?

Accepted Answer

Data access control and security. Data quality and security (access control) are the pillars of data governance for AI.

Answer

The number of pens in the supply closet

Answer

The speed of the local internet

Answer

The interior design of the office

Question 11

Which TWO teams should define the 'Risk Appetite' for a new AI project?

Accepted Answer

Senior Leadership/Business Owners. Risk appetite is a strategic decision involving both business leaders (who own the risk) and risk managers (who define the framework).

Answer

The local weather station

Answer

The office landscaping team

Answer

The company's mascot

Question 12

You are establishing an AI risk appetite framework using the NIST AI RMF. Which action best ensures alignment between AI innovation velocity and organizational risk tolerance?

Accepted Answer

Define risk tolerance levels based on potential impact to human rights and safety, differentiated by model deployment context.. Aligning risk appetite requires mapping technical AI performance metrics to business-level risk registers, ensuring that performance trade-offs are explicitly approved by stakeholders.

Answer

Set a static threshold for model accuracy at 95% across all AI projects.

Answer

Require all AI teams to use exclusively open-source models to mitigate vendor-related risks.

Answer

Delegate all AI risk acceptance decisions to the lead data scientist.

Question 13

Your organization is implementing an AI Risk Register. Which approach provides the most effective cross-functional coordination for identifying bias in a new HR recruitment AI?

Accepted Answer

Conduct a mandatory tabletop exercise involving HR, legal, and data science teams to simulate potential discriminatory outcomes.. Cross-functional engagement ensures that legal, ethics, and technical teams validate the model against disparate impact standards.

Answer

Perform a technical audit on the training dataset distribution.

Answer

Automate all bias detection using internal library scripts without human review.

Answer

Update the AI policy to forbid the use of demographic attributes in training data.

Question 14

When defining KPIs for an AI Governance program, which metric is most predictive of long-term model robustness?

Accepted Answer

The frequency of model retraining triggered by performance drift alerts.. Model drift and retraining frequency serve as leading indicators for the degradation of AI reliability over time.

Answer

Number of users accessing the AI interface.

Answer

Total number of AI models currently in production.

Answer

The budget spent on GPU cloud computing resources.

Question 15

An organization is integrating AI risk into its enterprise risk management (ERM) framework. What is the first step in this integration process?

Accepted Answer

Identify and classify all AI applications by criticality and risk level.. Before integrating, the organization must understand the AI scope and criticality relative to existing assets.

Answer

Assign a Chief AI Officer.

Answer

Install automated model monitoring tools.

Answer

Create an AI acceptable use policy.