Task Statement 5.2: Recognize Governance and Compliance Regulations for AI Systems. AIF-C01 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   After deploying an AI model, what is an essential ongoing activity in AI risk management?

   • AAvoiding any changes to the model to maintain stability
   • BDeleting all logs to protect privacy
   • CPerforming a one-time risk assessment before deployment and then stopping
   • DContinuous monitoring of model performance and impact
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which data governance practice ensures that the origin and transformation history of data used in AI models is documented?

   • AData masking
   • BData encryption
   • CData retention
   • DData lineage
   Reveal Solution Discussion Select an answer first
4. 13expert · medium

   A healthcare organization is deploying an AI system to prioritize patient triage in emergency departments. The system uses historical patient data that may contain biases. The organization wants to align with the NIST AI Risk Management Framework and ensure continuous monitoring. Which approach best balances the need for immediate deployment with the requirement for ongoing risk management?

   • ALimit the AI system to non-critical decisions and avoid any form of monitoring to reduce administrative burden.
   • BImplement a governance structure that includes regular bias testing, stakeholder feedback loops, and periodic model updates based on performance metrics.
   • CConduct a one-time bias audit before deployment and then rely on the audit results to ensure ongoing compliance.
   • DDeploy the system immediately and monitor for adverse events only after they occur, using a reactive incident response plan.
   Reveal Solution Discussion Select an answer first
5. 14expert · medium

   A multinational company deploys an AI recruitment tool in the EU and the US. The tool screens job applicants and must comply with the EU AI Act and various US state laws. The company faces conflicting requirements: the EU AI Act requires transparency and human oversight, while some US states require specific disclosures to applicants. Which approach best satisfies both regulatory environments?

   • AImplement a single global policy that meets the strictest requirements from any jurisdiction and apply it uniformly.
   • BUse a third-party vendor to operate the AI system and transfer all compliance responsibility to the vendor.
   • CDeploy separate AI systems for each region, each tailored to local regulations, and keep them completely isolated.
   • DComply only with the EU AI Act because it is the most comprehensive regulation.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   An AI system processes health data in the United States. Which compliance obligation is most likely to apply to this system?

   • AGeneral Data Protection Regulation (GDPR)
   • BHealth Insurance Portability and Accountability Act (HIPAA)
   • CSarbanes-Oxley Act (SOX)
   • DPayment Card Industry Data Security Standard (PCI DSS)
   Reveal Solution Discussion Select an answer first