AAIR · domain
AI Lifecycle Risk Management
Practise ISACA Advanced in AI Risk (AAIR) (AAIR) AI Lifecycle Risk Management practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.
Focused practice
Practice AI Lifecycle Risk Management questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about AI Lifecycle Risk Management
AI Lifecycle Risk Management questions test whether you can apply the concept in context, not just recognise a definition.
How the topic appears in realistic exam-style scenarios.
Which detail in the question changes the correct answer.
How to eliminate plausible but wrong options.
How to connect the question back to the wider exam objective.
Watch out for
Common AI Lifecycle Risk Management exam traps
- ▸Answering from memory before reading the full scenario.
- ▸Missing a constraint such as cost, availability, security, scope or command context.
- ▸Choosing a broad answer when the question asks for the most specific fix.
- ▸Ignoring why the wrong options are tempting.
Question index
All AI Lifecycle Risk Management questions (42)
Click any question to see the full explanation, or start a practice session above.
Which TWO actions should be taken when a model exhibits significant drift?
Medium2A developer is using 'Shadow Deployments' for a new AI model. What is the main risk being addressed?
Hard3Why is 'Explainability' considered a key risk management control in the AI lifecycle?
Easy4A practitioner is reviewing the 'Model Card' for an AI system. What is the primary purpose of this artifact in the AI lifecycle risk management process?
Medium5Which THREE risks are associated with 'Automated Deployment' of AI models without a human-in-the-loop?
Hard6During the AI lifecycle, when should a 'Data Quality' assessment be performed to minimize long-term risk?
Easy7Which THREE factors should be monitored to detect 'Model Drift' in the deployment phase?
Hard8Which TWO of the following are key components of a robust AI lifecycle risk management program?
Medium9During the 'Monitoring' phase, which activity is most critical for identifying model 'feedback loops'?
Easy10Which THREE artifacts should be reviewed during a post-incident AI risk analysis?
Hard11In the context of the Google Cloud Vertex AI Model Registry, what is the best approach to mitigate the risk associated with a model update that performs poorly on edge cases?
Hard12You are managing a model that utilizes 'Online Learning'. What is the most critical risk requiring constant lifecycle vigilance?
Hard13You are utilizing Azure Machine Learning to manage a deployment. You detect a sudden drop in model performance due to 'concept drift'. Which specific configuration in the Azure ML Model Monitoring dashboard should be adjusted to better detect this?
Hard14A practitioner is setting up a model monitoring service in AWS SageMaker Model Monitor. They observe that the ground truth data is significantly delayed. What action ensures risk identification remains effective?
Medium15Which TWO factors are essential when documenting a model for risk management?
Medium16A team notices that an AI model's performance decreases when the input data contains abbreviations that were not present in the training set. This is a risk associated with which lifecycle stage?
Medium17A company is implementing 'Human-in-the-Loop' (HITL) for its AI decision system. What is the primary risk of relying on HITL?
Medium18You are performing a 'Model Drift' analysis. Which metric is most indicative of performance degradation without access to real-time ground truth?
Medium19You are auditing a model's lifecycle and discover that the training data distribution changes every time the model retrains. What is the biggest risk here?
Hard20You are assessing risk for an AI model that uses 'Transfer Learning'. What is the most critical risk to manage regarding the pre-trained base model?
Hard21Which THREE considerations must be addressed when designing a 'Training' pipeline to minimize data quality risk?
Hard22During the 'Training' phase, why is 'Data Splitting' (train/validation/test) crucial for risk management?
Easy23A practitioner is managing AI risk in a CI/CD pipeline. What should be the final gate before model promotion to production?
Medium24Which TWO of the following techniques help mitigate bias in the AI lifecycle?
Medium25Which TWO of the following scenarios represent 'Data Quality Risk'?
Medium26When managing AI lifecycle risk for a model in a regulated industry, which artifact serves as the most important audit trail for the model's provenance?
Hard27Which TWO metrics are standard in 'Monitoring' for identifying performance-related AI risks?
Medium28A team is designing an AI lifecycle monitoring system. Which metric is most effective for detecting 'Out-of-Distribution' (OOD) risks?
Medium29Which THREE factors contribute to 'Data Quality Risk' during the training phase?
Hard30What is the primary risk of 'Model Complexity' in the context of the AI lifecycle?
Medium31Which AI lifecycle stage is most susceptible to the risk of 'data leakage' where training data inadvertently contains information from the future/target?
Easy32What is the primary risk objective of 'Model Versioning' in the AI lifecycle?
Easy33Which TWO activities are part of the 'Risk Identification' step in the AI lifecycle?
Medium34During the design phase of a machine learning model, a practitioner identifies that the training dataset has significant underrepresentation of a minority demographic. What is the most effective proactive risk mitigation strategy?
Medium35To mitigate 'Training-Serving Skew' in the AI lifecycle, what is the best practice for data processing pipelines?
Hard36When a 'Data Drift' alert is triggered in a production environment, what is the first step in the risk management lifecycle?
Medium37A financial institution uses an AI model to approve loans. After deployment, they notice the model is rejecting loan applications from a specific region at a rate 30% higher than historical human benchmarks. What is the most appropriate next step in the risk lifecycle?
Medium38Which of the following is an example of 'Data Quality Risk' in the AI lifecycle?
Easy39Which THREE strategies are effective for mitigating 'Adversarial Risk' in an AI lifecycle?
Hard40In the context of the 'AI Lifecycle', what is the risk of 'Model Decay'?
Hard41A company is integrating an AI model that uses 'Online Inference'. What is the most significant risk regarding model security?
Medium42Which of the following is a primary risk during the 'Deployment' stage of the AI lifecycle?
EasyOther domains
All AAIR exam domains
Frequently asked questions
- What does the AI Lifecycle Risk Management domain cover on the AAIR exam?
- AI Lifecycle Risk Management questions test whether you can apply the concept in context, not just recognise a definition.
- How many questions are in this domain?
- This page lists all 42 AI Lifecycle Risk Management questions in the AAIR question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only AI Lifecycle Risk Management questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.