Objective 2.3 Follow Applicable Regulations, Standards, and Best Practices CERTIFIED-ETHICAL-EMERGING-TECHNOLOGIST Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A data science team is developing an AI recruitment tool. Which set of guidelines is specifically intended to help ensure AI systems are ethical, transparent, and respect human rights?

   • AISO/IEC 27001
   • BNIST Cybersecurity Framework
   • CCCPA
   • DEthical AI guidelines
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A global e-commerce company is facing a data breach that exposed personal data of EU and California residents. The company must decide how to respond. Which action is required by both GDPR and CCPA?

   • ADelete all personal data of affected individuals immediately.
   • BNotify affected individuals without undue delay, and provide information about the breach and their rights.
   • COffer affected individuals free credit monitoring services.
   • DNotify the relevant supervisory authority within 72 hours of becoming aware of the breach.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A financial services company is deploying an AI-based credit scoring system. The compliance team wants to ensure the system aligns with recognized ethical AI guidelines and can demonstrate accountability. Which approach best meets this goal?

   • AEnsure the model is technically explainable by using only linear regression, regardless of performance.
   • BConduct a data protection impact assessment (DPIA) and publish the model's algorithm publicly.
   • CImplement a model risk management framework that includes regular audits, documentation of model decisions, and a clear escalation process for adverse outcomes.
   • DRely on the vendor's certification that the model is compliant, and avoid internal review.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A European company is using an AI system to personalize online advertising. The company processes data of EU citizens. Under GDPR, which lawful basis is most likely to be appropriate for this processing?

   • AContractual necessity, because the user is using the free service.
   • BLegal obligation, because advertising is required by law.
   • CLegitimate interest, because the company has a commercial interest in advertising.
   • DConsent, because the processing involves tracking and profiling for advertising purposes.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A technology company is developing an AI system that makes hiring decisions. The company wants to follow ethical AI best practices and ensure fairness. Which action is most aligned with recognized ethical AI guidelines?

   • AConduct regular bias audits and implement a feedback mechanism for candidates to contest decisions.
   • BUse a proprietary algorithm and do not disclose its decision-making process to protect trade secrets.
   • CCollect as much personal data as possible to improve the model's accuracy.
   • DRely solely on the AI system's recommendations without human oversight.
   Reveal Solution Discussion Select an answer first