A tech company is developing an AI chatbot for customer service. The governance committee wants to ensure the chatbot does not generate harmful or biased responses. Which policy should the company implement?

Use a sentiment analysis model to detect negative responses after deployment.

Allow the chatbot to operate autonomously and rely on post-deployment monitoring.

Require human review of all chatbot responses before they are sent to customers.

Limit the chatbot's vocabulary to a predefined set of safe responses.

A multinational corporation is deploying an AI system that processes personal data across several countries with conflicting data protection laws. The legal team is concerned about compliance, while the business wants to minimize operational changes. Which approach best reconciles these concerns?

Adopt the most stringent data protection requirements as the global baseline.

Seek legal opinions from each country and implement a patchwork of policies.

Comply with the laws of the country where the AI system is developed.

Use data anonymization to avoid triggering data protection laws.

In AI risk management, what is the primary purpose of a risk assessment?

To assign blame when risks materialize

To guarantee that all risks are eliminated

To identify, analyze, and evaluate potential risks that could affect the AI system

To document all possible risks without prioritizing them

CompTIASecAI+

Domain 4Objective 2

Integrate GRC into AI Projects CY0-001 Practice Questions (Page 7)

Part of the AI governance, risk, and compliance domain, which accounts for 19% of the CY0-001 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 2–3 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

19%of the exam

Questions 31–33

31application · medium
A tech company is developing an AI chatbot for customer service. The governance committee wants to ensure the chatbot does not generate harmful or biased responses. Which policy should the company implement?
Select an answer first
32expert · hard
A multinational corporation is deploying an AI system that processes personal data across several countries with conflicting data protection laws. The legal team is concerned about compliance, while the business wants to minimize operational changes. Which approach best reconciles these concerns?
Select an answer first
33foundation · easy
In AI risk management, what is the primary purpose of a risk assessment?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CY0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CY0-001” is a trademark of its owner, used for identification only.