An organization is establishing board oversight of AI. Which artifact provides the strongest evidence that the board is exercising effective challenge over AI strategy?
Ai Governance And Risk
Question · Medium
Spot the AI hallucination
Short
Which control is the MOST important foundation for an AI governance program?
Question · Easy
Under the EU AI Act, which of the following is classified as a high-risk AI system?
Tech Exam Prep Podcast
Listen on Spotify
Podcast
NYC Local Law 144 requires an annual independent bias audit for which type of AI system?
An auditor is testing an AEDT bias audit performed under NYC Local Law 144. Which calculation MUST be present?
Question · Hard
The Illinois Artificial Intelligence Video Interview Act requires which control before an employer uses AI to analyze applicant video interviews?
Colorado SB24-205 (the Colorado AI Act, effective February 1, 2026) imposes which duty on developers of high-risk AI systems?
GDPR Article 22 grants data subjects which right with respect to automated decisions?
A bank uses a model to deny credit applications. To comply with US Federal Reserve SR 11-7, which control is essential?
An AI tool diagnoses skin lesions and recommends biopsy. FDA regulates this as Software as a Medical Device (SaMD). Which control is MOST critical for ongoing assurance?
Which body of guidance is specifically structured around the four functions GOVERN, MAP, MEASURE, and MANAGE?
An AI ethics committee reviews proposed use cases. Which decision rights structure provides the strongest control?
Following revocation of US Executive Order 14110, the active federal AI governance directive for executive agencies is primarily set by:
A risk register entry for a customer-facing LLM should at minimum include which fields?
The IIA's Artificial Intelligence Auditing Framework organizes assurance activities around three components. They are:
Which artifact BEST supports a data subject's GDPR right to meaningful information about the logic involved in an automated decision?
Which control most directly addresses the risk of training-data leakage of personal data through an LLM?
A retailer deploys an AI-driven dynamic pricing engine. Which stakeholder consideration is MOST critical to document for governance review?
Which COBIT 2019 management objective is MOST directly aligned with managing AI-related risk?
An AI use-case approval workflow should require which gate BEFORE production deployment?
Under the EU AI Act, which obligation applies to providers of general-purpose AI models with systemic risk?
Which of the following is the BEST evidence that AI policies are operating effectively, not just designed?
A company asserts compliance with ISO/IEC 42001:2023. What does the standard certify?
Which control BEST mitigates the risk that AI use cases bypass governance because business teams treat ChatGPT-style tools as 'just like a search engine'?
Which framework provides ESG-aligned guidance specifically integrating AI risk into enterprise risk management as part of internal control?
A model inventory entry should classify each AI system. Which classification dimension is MOST important for downstream regulatory mapping?
Which is the BEST control to ensure human-in-the-loop oversight is meaningful (not rubber-stamping)?
Under the EU AI Act, which AI practice is PROHIBITED?
A model's ethics review identified a potential disparate-impact concern. Which acceptance criterion BEST closes the issue before deployment?
Which of the following BEST satisfies ICAEW AI Assurance Framework expectations for a third-party assurance engagement over an AI system?
An auditor reviewing operational resilience of an AI service should EXPECT which control?
Ai Operations
Which monitoring metric BEST detects covariate (input) drift in a deployed model?
A change to retraining the model with new data has been pushed without prior approval. Which control failed?
What artifact is MOST useful for auditing the lineage of training data?
A model is retired. Which action is REQUIRED for proper retirement under sound AI lifecycle controls?
Which is the BEST indicator of fairness drift in a deployed credit-decision model?
Which inference-monitoring control MOST effectively catches a silent data-pipeline failure?
Which BEST describes an effective cost-monitoring control for an LLM deployed via a third-party API?
Which is the MOST appropriate metric for evaluating a model on a class-imbalanced fraud-detection task?
Which control is critical for retrieval-augmented generation (RAG) systems that read internal documents?
Which logging configuration BEST supports auditability of LLM-based decisions?
Which control BEST mitigates the LLM01 prompt injection risk in an agent that calls tools?
Which is the BEST evidence that a model versioning control is operating?
Which value is the BEST candidate for a service-level objective (SLO) when monitoring an AI inference service?
Which control BEST addresses model-poisoning risk during training data ingestion?
Which control is MOST relevant to assessing the resilience of an LLM application against denial-of-wallet attacks?
Loading more…