At which stage of the AI lifecycle should GRC processes first be incorporated?

Only when a compliance violation occurs

During the initial design and planning phase

During the model training phase only

Only after the model is deployed

A financial services company is deploying an AI system that automates loan approvals. The system will process personal data of EU citizens. The company is based in the US and uses a cloud provider with data centers in the EU. Which compliance requirement must the company address to lawfully process this data?

Obtain consent from each loan applicant before processing their data.

Ensure the cloud provider offers data residency in the EU and that data transfers comply with GDPR.

Store all data on-premises in the US to avoid GDPR jurisdiction.

Use only synthetic data for the AI model to avoid GDPR entirely.

Which of the following is an example of engaging stakeholders in AI GRC?

Avoiding feedback to prevent delays

Conducting a public consultation on the use of an AI system

Limiting communication to the legal department only

Keeping all AI decisions confidential to avoid external influence

An e-commerce company has deployed a recommendation AI that personalizes product suggestions. The governance team wants to ensure the model remains fair and unbiased over time. Which mechanism should they implement to achieve this?

Rely on customer feedback to identify any bias issues.

Freeze the model's parameters to prevent any changes after deployment.

Schedule quarterly model audits that include bias testing and performance reviews.

Set up a one-time review of the model's training data before launch.

CompTIASecAI+

Domain 4Objective 2

Integrate GRC into AI Projects CY0-001 Practice Questions (Page 4)

Part of the AI governance, risk, and compliance domain, which accounts for 19% of the CY0-001 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 2–3 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

19%of the exam

Questions 16–20

16foundation · easy
In the context of GRC frameworks, which component is primarily concerned with defining roles, responsibilities, and decision-making processes for AI projects?
Select an answer first
17foundation · easy
At which stage of the AI lifecycle should GRC processes first be incorporated?
Select an answer first
18application · medium
A financial services company is deploying an AI system that automates loan approvals. The system will process personal data of EU citizens. The company is based in the US and uses a cloud provider with data centers in the EU. Which compliance requirement must the company address to lawfully process this data?
Select an answer first
19foundation · easy
Which of the following is an example of engaging stakeholders in AI GRC?
Select an answer first
20application · medium
An e-commerce company has deployed a recommendation AI that personalizes product suggestions. The governance team wants to ensure the model remains fair and unbiased over time. Which mechanism should they implement to achieve this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CY0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CY0-001” is a trademark of its owner, used for identification only.

Integrate GRC into AI Projects CY0-001 Practice Questions (Page 4)

Questions 16–20

In the context of GRC frameworks, which component is primarily concerned with defining roles, responsibilities, and decision-making processes for AI projects?

At which stage of the AI lifecycle should GRC processes first be incorporated?

Which of the following is an example of engaging stakeholders in AI GRC?

An e-commerce company has deployed a recommendation AI that personalizes product suggestions. The governance team wants to ensure the model remains fair and unbiased over time. Which mechanism should they implement to achieve this?

Keep studying — AI governance, risk, and compliance