Courseiva

AAIR · domain

AI Lifecycle Risk Management

Practise ISACA Advanced in AI Risk (AAIR) (AAIR) AI Lifecycle Risk Management practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

42 questions8 easy19 medium15 hard

Focused practice

Practice AI Lifecycle Risk Management questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about AI Lifecycle Risk Management

AI Lifecycle Risk Management questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common AI Lifecycle Risk Management exam traps

  • Answering from memory before reading the full scenario.
  • Missing a constraint such as cost, availability, security, scope or command context.
  • Choosing a broad answer when the question asks for the most specific fix.
  • Ignoring why the wrong options are tempting.

Question index

All AI Lifecycle Risk Management questions (42)

Click any question to see the full explanation, or start a practice session above.

1

Which TWO actions should be taken when a model exhibits significant drift?

Medium
2

A developer is using 'Shadow Deployments' for a new AI model. What is the main risk being addressed?

Hard
3

Why is 'Explainability' considered a key risk management control in the AI lifecycle?

Easy
4

A practitioner is reviewing the 'Model Card' for an AI system. What is the primary purpose of this artifact in the AI lifecycle risk management process?

Medium
5

Which THREE risks are associated with 'Automated Deployment' of AI models without a human-in-the-loop?

Hard
6

During the AI lifecycle, when should a 'Data Quality' assessment be performed to minimize long-term risk?

Easy
7

Which THREE factors should be monitored to detect 'Model Drift' in the deployment phase?

Hard
8

Which TWO of the following are key components of a robust AI lifecycle risk management program?

Medium
9

During the 'Monitoring' phase, which activity is most critical for identifying model 'feedback loops'?

Easy
10

Which THREE artifacts should be reviewed during a post-incident AI risk analysis?

Hard
11

In the context of the Google Cloud Vertex AI Model Registry, what is the best approach to mitigate the risk associated with a model update that performs poorly on edge cases?

Hard
12

You are managing a model that utilizes 'Online Learning'. What is the most critical risk requiring constant lifecycle vigilance?

Hard
13

You are utilizing Azure Machine Learning to manage a deployment. You detect a sudden drop in model performance due to 'concept drift'. Which specific configuration in the Azure ML Model Monitoring dashboard should be adjusted to better detect this?

Hard
14

A practitioner is setting up a model monitoring service in AWS SageMaker Model Monitor. They observe that the ground truth data is significantly delayed. What action ensures risk identification remains effective?

Medium
15

Which TWO factors are essential when documenting a model for risk management?

Medium
16

A team notices that an AI model's performance decreases when the input data contains abbreviations that were not present in the training set. This is a risk associated with which lifecycle stage?

Medium
17

A company is implementing 'Human-in-the-Loop' (HITL) for its AI decision system. What is the primary risk of relying on HITL?

Medium
18

You are performing a 'Model Drift' analysis. Which metric is most indicative of performance degradation without access to real-time ground truth?

Medium
19

You are auditing a model's lifecycle and discover that the training data distribution changes every time the model retrains. What is the biggest risk here?

Hard
20

You are assessing risk for an AI model that uses 'Transfer Learning'. What is the most critical risk to manage regarding the pre-trained base model?

Hard
21

Which THREE considerations must be addressed when designing a 'Training' pipeline to minimize data quality risk?

Hard
22

During the 'Training' phase, why is 'Data Splitting' (train/validation/test) crucial for risk management?

Easy
23

A practitioner is managing AI risk in a CI/CD pipeline. What should be the final gate before model promotion to production?

Medium
24

Which TWO of the following techniques help mitigate bias in the AI lifecycle?

Medium
25

Which TWO of the following scenarios represent 'Data Quality Risk'?

Medium
26

When managing AI lifecycle risk for a model in a regulated industry, which artifact serves as the most important audit trail for the model's provenance?

Hard
27

Which TWO metrics are standard in 'Monitoring' for identifying performance-related AI risks?

Medium
28

A team is designing an AI lifecycle monitoring system. Which metric is most effective for detecting 'Out-of-Distribution' (OOD) risks?

Medium
29

Which THREE factors contribute to 'Data Quality Risk' during the training phase?

Hard
30

What is the primary risk of 'Model Complexity' in the context of the AI lifecycle?

Medium
31

Which AI lifecycle stage is most susceptible to the risk of 'data leakage' where training data inadvertently contains information from the future/target?

Easy
32

What is the primary risk objective of 'Model Versioning' in the AI lifecycle?

Easy
33

Which TWO activities are part of the 'Risk Identification' step in the AI lifecycle?

Medium
34

During the design phase of a machine learning model, a practitioner identifies that the training dataset has significant underrepresentation of a minority demographic. What is the most effective proactive risk mitigation strategy?

Medium
35

To mitigate 'Training-Serving Skew' in the AI lifecycle, what is the best practice for data processing pipelines?

Hard
36

When a 'Data Drift' alert is triggered in a production environment, what is the first step in the risk management lifecycle?

Medium
37

A financial institution uses an AI model to approve loans. After deployment, they notice the model is rejecting loan applications from a specific region at a rate 30% higher than historical human benchmarks. What is the most appropriate next step in the risk lifecycle?

Medium
38

Which of the following is an example of 'Data Quality Risk' in the AI lifecycle?

Easy
39

Which THREE strategies are effective for mitigating 'Adversarial Risk' in an AI lifecycle?

Hard
40

In the context of the 'AI Lifecycle', what is the risk of 'Model Decay'?

Hard
41

A company is integrating an AI model that uses 'Online Inference'. What is the most significant risk regarding model security?

Medium
42

Which of the following is a primary risk during the 'Deployment' stage of the AI lifecycle?

Easy

Frequently asked questions

What does the AI Lifecycle Risk Management domain cover on the AAIR exam?
AI Lifecycle Risk Management questions test whether you can apply the concept in context, not just recognise a definition.
How many questions are in this domain?
This page lists all 42 AI Lifecycle Risk Management questions in the AAIR question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only AI Lifecycle Risk Management questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
ISACA Advanced in AI Risk (AAIR) (AAIR) AI Lifecycle Risk Management Practice Questions