A startup is building an AI-powered recruitment tool. The founders want to establish a GRC framework that is scalable as the company grows. Which component is essential for this framework?

A dedicated GRC team that handles all AI projects independently.

A focus on technical risk only, ignoring ethical and compliance aspects.

A single compliance checklist that is completed once at the start.

Documented policies and procedures that are regularly reviewed and updated.

A large enterprise is deploying multiple AI models across different departments. The GRC team wants to ensure consistent governance without slowing down innovation. Which strategy best achieves this balance?

Allow each department to create its own GRC policies.

Focus GRC efforts only on high-profile AI projects.

Require all AI projects to undergo the same rigorous review process.

Establish a centralized GRC framework with tiered review processes based on risk level.

A manufacturing company is integrating AI into its quality control process. The project manager wants to ensure GRC is considered throughout the AI lifecycle. Which approach best achieves this?

Assign GRC responsibilities to the data science team only.

Use a checklist of compliance requirements and check it once at project initiation.

Incorporate GRC checkpoints at each phase of the AI lifecycle, from design to deployment.

Perform a single comprehensive GRC review just before deployment.

What is the primary purpose of compliance requirements in AI systems?

To ensure AI systems adhere to applicable laws and regulations

To maximize the profitability of AI initiatives

To simplify the AI development process

To replace the need for internal governance policies

Which of the following is an example of a continuous improvement activity in AI GRC?

Conducting a single risk assessment at project start

Ignoring feedback from monitoring systems

Regularly updating risk assessments based on new data

Freezing all GRC policies to ensure stability

CompTIASecAI+

Domain 4Objective 2

Integrate GRC into AI Projects CY0-001 Practice Questions (Page 2)

Part of the AI governance, risk, and compliance domain, which accounts for 19% of the CY0-001 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 2–3 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

19%of the exam

Questions 6–10

6application · medium
A startup is building an AI-powered recruitment tool. The founders want to establish a GRC framework that is scalable as the company grows. Which component is essential for this framework?
Select an answer first
7expert · hard
A large enterprise is deploying multiple AI models across different departments. The GRC team wants to ensure consistent governance without slowing down innovation. Which strategy best achieves this balance?
Select an answer first
8application · medium
A manufacturing company is integrating AI into its quality control process. The project manager wants to ensure GRC is considered throughout the AI lifecycle. Which approach best achieves this?
Select an answer first
9foundation · easy
What is the primary purpose of compliance requirements in AI systems?
Select an answer first
10foundation · easy
Which of the following is an example of a continuous improvement activity in AI GRC?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CY0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CY0-001” is a trademark of its owner, used for identification only.