Under GDPR, what is a key compliance requirement for organizations that process personal data?

Deleting all personal data after one year of collection

Publishing all personal data in a public registry for transparency

Storing all personal data on physical servers located within the organization's headquarters

Obtaining explicit consent from individuals before processing their data

A US-based AI company develops a facial recognition system used by law enforcement agencies. The company is expanding into the EU market. Which regulatory body would have direct oversight over the company's compliance with GDPR for its EU operations?

The European Data Protection Board (EDPB)

The national Data Protection Authority (DPA) in the EU member state where the company has its main establishment or where the processing occurs.

The Federal Trade Commission (FTC)

Why is it important for AI professionals to monitor updates and trends in AI regulations?

To identify which AI algorithms are the most efficient for their specific use case

To predict stock market trends based on regulatory changes

To ensure that AI systems are developed without any human oversight

To ensure that their organization's AI systems remain compliant with evolving legal requirements

What role does ethics play in the creation of AI regulatory frameworks?

Ethics is used to determine the technical specifications for AI algorithms

Ethics provides a moral foundation that helps define what should be regulated and how

Ethics has no role because regulations are purely based on economic considerations

Ethics is only considered after regulations are enacted, to interpret them

An AI ethics board at a technology company is reviewing a new AI system that predicts employee performance. The system uses historical performance data that may reflect past biases. The board is concerned about fairness and discrimination. Which action best integrates ethical considerations into the regulatory compliance process?

Conduct a bias audit and document the results as part of the company's compliance framework.

Discontinue the project because ethical concerns are too complex to resolve.

Rely on the legal team to ensure the system meets all applicable laws without further ethical review.

Deploy the system immediately and monitor for complaints from employees.

CompTIASecAI+

Domain 4Objective 1

Understand Regulatory Frameworks CY0-001 Practice Questions (Page 3)

Part of the AI governance, risk, and compliance domain, which accounts for 19% of the CY0-001 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 2–3 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

19%of the exam

Questions 11–15

11foundation · easy
Under GDPR, what is a key compliance requirement for organizations that process personal data?
Select an answer first
12application · medium
A US-based AI company develops a facial recognition system used by law enforcement agencies. The company is expanding into the EU market. Which regulatory body would have direct oversight over the company's compliance with GDPR for its EU operations?
Select an answer first
13foundation · easy
Why is it important for AI professionals to monitor updates and trends in AI regulations?
Select an answer first
14foundation · easy
What role does ethics play in the creation of AI regulatory frameworks?
Select an answer first
15application · medium
An AI ethics board at a technology company is reviewing a new AI system that predicts employee performance. The system uses historical performance data that may reflect past biases. The board is concerned about fairness and discrimination. Which action best integrates ethical considerations into the regulatory compliance process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CY0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CY0-001” is a trademark of its owner, used for identification only.