AI0-001 AI Governance and Ethics Practice Question
An AI risk manager is applying the NIST AI Risk Management Framework (AI RMF). In which function would the organization establish a risk management process and assign roles and responsibilities for AI oversight?
⚠ Common exam trap
A common trap is to assume that the 'Manage' function covers all risk management activities including establishing processes and roles, because its name implies broad oversight. However, in the NIST AI RMF, 'Govern' is the specific function for setting up risk management processes and accountability structures, while 'Manage' is reserved for risk treatment after assessment.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Govern
The Govern function in the NIST AI RMF is specifically designed to establish organizational structures, policies, and accountability mechanisms for AI risk management. This includes defining roles and responsibilities, setting risk management processes, and ensuring oversight across the AI lifecycle. The other functions (Map, Measure, Manage) focus on different aspects such as understanding context, assessing risks, and treating risks, respectively.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Map
Why it's wrong here
Map frames the context and identifies risks, benefits and affected stakeholders, but does not create the governance structure or assign oversight accountability. Govern establishes the risk management process, roles and responsibilities. Map would be correct when scoping the AI system and cataloguing its risks before treatment.
- ✗
Manage
Why it's wrong here
Manage allocates resources to identified risks and monitors residual and emergent risk treatment, but does not establish the governance framework itself. Govern sets up the risk management process, defines roles and responsibilities, and embeds oversight culture. Manage would be correct once risks are known and require prioritised response actions.
- ✓
Govern
Why this is correct
The Govern function establishes the policies, processes, roles and responsibilities for AI risk management across the organisation. Assigning oversight accountability and defining the risk process therefore sits in Govern, which satisfies the stem's requirement before Map, Measure and Manage activities occur.
- ✗
Measure
Why it's wrong here
Measure analyses, assesses and tracks identified AI risks using quantitative and qualitative methods, but does not define governance or assign oversight roles. Govern establishes the risk management process and accountability structure. Measure would be correct when evaluating the likelihood and impact of already-identified risks.
About these practice questions
Courseiva writes every AI0-001 question from scratch — 962 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.