CCNA Gcl Responsible Ai Governance Questions

Option A is correct because Google's AI Principles explicitly commit to incorporating privacy design principles, such as notice and consent, into AI systems. This means that AI systems should be designed with privacy safeguards from the outset, ensuring users are informed about data collection and have control over their data, aligning with frameworks like GDPR and privacy-by-design.

Google's AI Principles state that AI systems should be built and tested for safety, especially in high-stakes domains like healthcare, where human oversight is critical.

Option A is correct because Google's AI Principles emphasize that the first step in addressing bias is to evaluate and measure it using appropriate tools and diverse datasets. This aligns with Principle #2: 'Avoid creating or reinforcing unfair bias,' which requires testing models across relevant demographic groups before taking corrective action. Without evaluation, any subsequent mitigation steps would lack a baseline and could be ineffective or counterproductive.

The People + AI Guidebook (PAIR) is a Google initiative that provides guidelines, case studies, and design patterns for building human-centered AI.

Google's Content Safety filters in Vertex AI are designed to block generated content that violates safety policies, specifically targeting hate speech, violence, and sexually explicit material. This is a core component of responsible AI deployment, ensuring that model outputs adhere to ethical guidelines and legal requirements. The filters operate by analyzing the generated text or images against predefined safety categories, not by assessing data quality or source curation.

Vertex AI allows setting safety thresholds per category (B) and defining blocklists for specific terms (D) to customize content filtering.

Option C is correct because evaluating the model for bias using diverse test sets is a fundamental step in ensuring fairness in AI-driven loan approvals. This involves testing the model across demographic groups (e.g., race, gender, age) to detect disparate impact, which is required by regulations like the Equal Credit Opportunity Act (ECOA) and Fair Housing Act. Without this evaluation, the model could inadvertently discriminate, leading to legal and ethical violations.

Option A is correct because Google's AI Principles explicitly state 'Avoid creating or reinforcing unfair bias' as a standalone principle. This principle directly mandates that AI systems must be designed and tested to mitigate biases in training data, model outputs, and deployment contexts, ensuring fairness across demographic groups. It is the most direct response to the question's focus on avoiding unfair bias.

Model Cards are designed to communicate model performance, intended use, and limitations to stakeholders in a standardized format.

PAIR (People + AI Research) Explorables is the correct answer because it is a Google resource specifically designed to provide interactive visualizations and hands-on exercises that help AI practitioners grasp complex concepts like fairness, interpretability, and privacy. Unlike static documentation or tools, Explorables allow users to manipulate parameters and see real-time effects, making abstract responsible AI principles tangible and actionable.

Google Cloud's Vertex AI provides built-in safety filters that can be configured to block harmful content categories like hate speech, violence, sexual content, and dangerous instructions.

Under the EU AI Act, high-risk AI systems must undergo a conformity assessment before deployment to ensure compliance with requirements such as risk management, data governance, and transparency. This is a mandatory procedural step, not a performance metric or specific reasoning technique. The assessment may involve self-evaluation or third-party review depending on the system's risk category.

Vertex AI's grounding feature allows the model to cite sources from a provided knowledge base, improving factual accuracy and verifiability.

The principle 'avoid creating or reinforcing unfair bias' requires proactive identification and mitigation. Evaluating the model on diverse test sets is a standard way to detect and address bias before deployment.

Retrieval-Augmented Generation (RAG) is the most appropriate approach because it allows the chatbot to retrieve relevant policy document chunks from a vector store at inference time, eliminating the need to retrain the model when documents are updated monthly. This keeps the system cost-effective and scalable, as only the vector index needs to be refreshed, not the underlying LLM.

The EU AI Act requires human oversight for high-risk AI systems, including the ability to override the system's decisions. The other options are not specifically mandated by the Act.

The EU AI Act mandates that high-risk AI systems, such as those used for credit scoring and loan approvals, must include human oversight to mitigate risks of automated bias and errors. A human-in-the-loop (HITL) review ensures that each loan decision is subject to human judgment, allowing for intervention in edge cases or when the model's confidence is low. This directly satisfies the Act's requirement for meaningful human control over high-risk AI outputs.

Only option B fully addresses GDPR compliance by identifying and removing specific user data from the training set, then retraining. The other options do not effectively erase the user's influence from the model.

The Google AI Principle 'Uphold high standards of scientific excellence' directly addresses the need for generative AI outputs to be scientifically accurate, especially in domains like climate change reporting where factual precision is critical. This principle emphasizes rigorous validation, peer review, and adherence to established scientific methodologies to ensure the model's outputs are reliable and trustworthy.

Option C is correct because Google's AI Principles emphasize that high-risk AI applications, such as financial investment advice, must include meaningful human oversight to prevent harm. In this context, a human financial advisor must review and approve each chatbot response before it reaches the customer, ensuring compliance with responsible AI practices and regulatory requirements for fiduciary duty.

To comply with GDPR data minimization, the retailer should disable prompt/response logging. Vertex AI offers settings to control whether prompts and responses are stored for model improvement.

SynthID is Google's watermarking framework for AI-generated content, including text, images, and audio.

To comply with GDPR and data residency, the company must encrypt personal data, store data in specific regions, and control retention of prompts/responses. Consent management is part of GDPR but not specifically about data residency. Anonymization is one approach but not a universal requirement.

Option D is correct because configuring the Vertex AI endpoint to use an EU region ensures that all data processing, including model inference and any intermediate data handling, occurs within the EU, satisfying GDPR data residency requirements. This control directly enforces geographic data localization without relying on data transfer mechanisms like Standard Contractual Clauses (SCCs).

Option D is correct because under current copyright law, the user of a generative AI system is typically considered the author of the output, but only if the training data was lawfully obtained. If the model was trained on copyrighted works without permission, the generated content may be considered a derivative work, exposing the startup to infringement liability. Verifying training data provenance is therefore the most critical legal step before commercializing AI-generated content.

Responsible AI in healthcare requires human oversight for high-stakes decisions, evaluating the model for bias (especially across demographic groups), and ensuring transparency about the model's limitations. Training data representativeness is also critical.

The principle 'be built and tested for safety' directly applies to medical applications where incorrect detection could harm patients. The other principles are also relevant but safety is the most directly applicable to a diagnostic tool.

Chain-of-thought reasoning is the correct feature because it enables the generative AI model to produce an explicit, step-by-step logical path from patient symptoms to a diagnosis. This allows clinicians to verify each reasoning step, ensuring explainability and trust in the model's output, which is critical for rare disease diagnosis where transparency is paramount.

Safety filters block harmful categories; custom safety settings allow adjustment of thresholds. Model Cards and the People + AI Guidebook are not operational safety controls.

Differential privacy limits memorization; PII removal prevents it from being present; data minimization reduces risk. Quantization and k-fold cross-validation do not directly address PII memorization.

Option A is correct because GDPR grants data subjects the 'right to erasure' (Article 17), requiring organizations to delete personal data upon request without undue delay. For a generative AI application, this means the company must be able to remove specific training data or user inputs from the model's memory or logs, which is technically challenging but legally mandatory.

High-stakes domains require human oversight and transparency. Human review ensures accountability, and Model Cards communicate capabilities and limitations to stakeholders.

The Model Card Toolkit is specifically designed to document the intended uses, limitations, and ethical considerations of machine learning models, including image classification models. It generates a structured model card that provides transparency and accountability, which aligns directly with the team's goal of documenting these aspects.

Option D is correct because Retrieval-Augmented Generation (RAG) architecture retrieves specific legal statutes from a trusted external knowledge base and includes them as citations in the model's response. This ensures both accuracy (by grounding outputs in verifiable sources) and traceability (by providing direct references to the statutes used). Fine-tuning alone cannot guarantee that the model will cite specific statutes correctly, as it may hallucinate or misremember legal references.

Datasheets for Datasets are designed to document the motivation, composition, collection process, and other details of a dataset to promote transparency and reproducibility.

Chain-of-thought reasoning allows the model to generate step-by-step explanations, which is crucial for medical diagnosis transparency.

Grounding (citing sources) and chain-of-thought reasoning are the two features that directly improve accuracy and verifiability. Confidence indicators and safety filters are useful but do not directly address accuracy/verifiability.

Training data provenance is a key IP concern. The service should verify that the training data does not include copyrighted content without permission, and document the data sources to establish a chain of provenance.

Differential privacy (Option A) is the best practice because it adds calibrated noise during fine-tuning, mathematically guaranteeing that the model cannot memorize or leak individual PII records even if the training data contains such information. This approach preserves privacy without requiring complete removal of PII, which may be impractical or destroy data utility. Vertex AI supports differential privacy through libraries like TensorFlow Privacy, enabling privacy budget tracking via epsilon (ε) values.

The EU AI Act mandates risk management, transparency, and human oversight for high-risk systems. Google's AI Principles align with these requirements. The correct answer involves using safety filters for content, maintaining human review for appeals, and documenting the system's purpose and limitations.

Equalized odds measures whether a model's predictions have equal false positive/negative rates across groups. The other options either measure different aspects or are not specific to fairness.

Evaluating the model's outputs for bias using diverse test sets is essential to identify and mitigate unfair bias, as outlined in Google's AI Principles.

Grounding (citing sources) and chain-of-thought reasoning provide explainability by showing the reasoning steps and source evidence. Confidence indicators help radiologists assess reliability. The other options either lack explainability or are less suitable for medical decision support.

Option B is correct because the Human-in-the-loop (HITL) pattern ensures that a human reviews and can override the AI's suggestions before any final action is executed. This design explicitly maintains human oversight over critical decisions, preventing fully automated actions that could lead to harmful or unintended outcomes.

The bias stems from training data correlations. Fine-tuning on balanced, diverse data can reduce stereotypical associations. The other options either do not address the root cause or are less effective.