AAISM AI Governance And Program Management Practice Test 2 — 15 Questions

Question 1

An AI project is failing to meet its security requirements. Which governance process should be triggered to address this?

Accepted Answer

Risk acceptance or remediation plan initiation.. The AI Risk Acceptance or Remediation process ensures that management formally decides whether to fix the issue or accept the risk, documenting the decision.

Answer

Re-training the model without a review.

Answer

Immediate deletion of all data.

Answer

Ignoring the policy until the end of the year.

Question 2

Which mechanism best ensures 'Auditability' of AI decision-making?

Accepted Answer

Maintaining immutable logs of inputs, model versions, and outputs.. Comprehensive logging of inputs, model parameters, and outputs is essential to recreate and audit decisions.

Answer

Deleting logs after 24 hours.

Answer

Using proprietary black-box models only.

Answer

Hardcoding all decisions.

Question 3

Who is ultimately responsible for the outcomes of an AI system deployed by a business unit?

Accepted Answer

The Business Unit Leader.. The Business Owner or designated executive holds accountability for the system's performance, risk, and compliance.

Answer

The Cloud Service Provider.

Answer

The external auditor.

Answer

The junior data scientist.

Question 4

What is the benefit of 'AI Model Watermarking' for governance?

Accepted Answer

Facilitating identification and provenance of AI-generated content.. Watermarking assists in identifying synthetic content, which is crucial for provenance and combating misinformation.

Answer

Improving model prediction speed.

Answer

Preventing unauthorized hardware usage.

Answer

Reducing model memory footprint.

Question 5

Which phase of the AI Lifecycle is most critical for 'Bias Detection'?

Accepted Answer

Model testing and evaluation.. Testing and evaluation (pre-deployment) is the primary window for detecting and mitigating bias before it impacts users.

Answer

Contract negotiation with vendors.

Answer

Model decommissioning.

Answer

Data center power-up.

Question 6

An organization is using RAG (Retrieval-Augmented Generation). What is the primary governance concern for the retrieved documents?

Accepted Answer

Enforcement of document-level access controls.. Ensuring that retrieved documents are subject to appropriate access controls is critical to prevent data leakage of sensitive or unauthorized information.

Answer

The file size of the documents.

Answer

The font size used in the documents.

Answer

The language of the documents.

Question 7

When onboarding an AI startup vendor, what is the best strategy to manage 'Model Drift'?

Accepted Answer

Including performance and monitoring requirements in the SLA.. Contractual requirements for monitoring reports and incident notifications force the vendor to maintain model performance standards.

Answer

Performing local code reviews.

Answer

Buying more computing power.

Answer

Trusting the vendor's promise of stability.

Question 8

A company is performing an 'AI Impact Assessment' (AIA). Which domain is the most critical for identifying 'Privacy' risks?

Accepted Answer

Data lineage, sensitivity, and processing purpose.. Data processing and consent management are the pillars of AI privacy impact assessments.

Answer

Model training costs.

Answer

UI design features.

Answer

Server CPU utilization.

Question 9

Which team should lead the definition of 'AI Acceptable Use' policies?

Accepted Answer

A cross-functional committee including legal, privacy, and security.. Cross-functional teams including legal, privacy, security, and business stakeholders ensure the policy is balanced and enforceable.

Answer

The marketing department.

Answer

The software engineering team only.

Answer

The IT helpdesk team.

Question 10

Which activity is part of 'Ongoing AI Monitoring'?

Accepted Answer

Monitoring model performance and risk metrics.. Continuous performance review ensures that the AI system remains within its defined risk appetite and operational parameters.

Answer

Choosing the AI vendor.

Answer

Installing the server OS.

Answer

Initial software design review.

Question 11

Which scenario best illustrates an 'AI Security Incident'?

Accepted Answer

Unauthorized access to the model training weights.. An unauthorized model modification or data extraction is a clear security event requiring response.

Answer

The AI system running slower than usual.

Answer

A scheduled server maintenance window.

Answer

A user simply disliking the AI output.

Question 12

When evaluating AI 'Bias', which concept must be governed first?

Accepted Answer

Defining the organization's fairness and equity metrics.. Defining fairness metrics is the foundational step before measurement or mitigation can occur.

Answer

Selecting the GPU brand.

Answer

Changing the model font.

Answer

Deleting the training database.

Question 13

What is the goal of an 'AI Security Awareness Program'?

Accepted Answer

To educate employees on AI security risks and safe usage.. To ensure all staff understand the risks of AI, including prompt injection, data leakage, and ethical pitfalls.

Answer

To write Python code for everyone.

Answer

To mandate AI usage in all tasks.

Answer

To replace human workers.

Question 14

Which control is most effective against 'Prompt Injection' attacks?

Accepted Answer

Using a secure AI Gateway with input filtering.. Implementing input sanitization and output filtering via an AI Gateway is a standard defensive control.

Answer

Adding more training data.

Answer

Requiring a longer password.

Answer

Disabling the internet.

Question 15

When conducting an AI audit, what should be the primary focus of the 'Data Governance' review?

Accepted Answer

Data quality, lineage, and access controls.. Data governance ensures that only authorized, high-quality, and compliant data is used for training and inference.

Answer

The model's marketing reach.

Answer

The color of the UI.

Answer

The model creator's salary.