Vendor Evaluation and Coordination CAIPM Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A healthcare organization is evaluating AI vendors for a patient-risk prediction system. The organization must comply with HIPAA and requires the vendor to process data in the United States. During the evaluation, two vendors meet the technical requirements. Vendor A offers a public cloud solution with data residency in the U.S. and provides a Business Associate Agreement (BAA). Vendor B offers a private cloud solution hosted in the U.S. but does not provide a BAA. Which vendor should the organization select, and why?

   • AVendor B, because a private cloud is inherently more secure and ensures compliance without needing a BAA.
   • BVendor A, because public cloud solutions are always more compliant than private cloud solutions.
   • CVendor B, because private cloud guarantees that data never leaves the organization's control, which is required by HIPAA.
   • DVendor A, because the BAA addresses HIPAA compliance obligations and the U.S. data residency satisfies the regulatory requirement.
   Reveal Solution Discussion Select an answer first
2. 47expert · hard

   An insurance company has an SLA with an AI vendor for claims processing. The SLA includes a 99.95% uptime guarantee and a penalty of 5% of the monthly fee for each hour of downtime. In a given month, the service experienced 45 minutes of downtime. The vendor argues that the downtime was due to a planned maintenance window that was communicated in advance, and the SLA excludes planned maintenance. The company's operations manager believes the downtime should count because it occurred during business hours. What should the company do?

   • ATerminate the contract because the vendor is unreliable.
   • BReview the SLA definition of downtime and the exclusions for planned maintenance, then determine if the maintenance was properly communicated and within the allowed window.
   • CAccept the vendor's argument because planned maintenance is typically excluded.
   • DImmediately apply the penalty because the downtime occurred during business hours.
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   A telecommunications company is implementing an AI-based network-anomaly detection system. The vendor is located in a different time zone, and the project has a tight deadline. The program manager wants to ensure effective communication and timely delivery. Which communication mechanism should be established?

   • AHave the vendor work independently and report progress at the end of the project.
   • BRequire the vendor to be available during the company's business hours only.
   • CCommunicate only through email to maintain a written record of all decisions.
   • DSet up a shared project management tool with a clear escalation path and schedule daily stand-up meetings at a time that works for both parties.
   Reveal Solution Discussion Select an answer first
5. 49expert · hard

   A company has an SLA with an AI vendor that includes a 99.9% uptime guarantee. The vendor has experienced an outage that lasted 3 hours, which exceeds the SLA's allowable downtime. The company's program manager needs to respond. The SLA includes a penalty clause but also a 'cure period' that allows the vendor to fix issues before penalties apply. What should the program manager do?

   • AIgnore the outage because the vendor will likely improve in the future.
   • BImmediately invoke the penalty clause without waiting for the cure period.
   • CTerminate the contract immediately because the outage is a material breach.
   • DWait for the cure period to expire before invoking the penalty clause, while documenting the outage and its impact.
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A retail company is selecting an AI vendor for a demand-forecasting system. The company's AI strategy emphasizes rapid deployment and cost predictability. The evaluation team has narrowed the choices to three vendors. Vendor X offers a fully managed solution with a fixed monthly fee. Vendor Y offers an open-source platform that requires in-house expertise to deploy and maintain. Vendor Z offers a custom solution with a lower initial cost but variable usage-based pricing. Which vendor should the company select to best align with its stated strategy?

   • AVendor X, because the fixed monthly fee provides cost predictability and the managed service supports rapid deployment.
   • BVendor Z, because the lower initial cost is the most important factor in vendor selection.
   • CVendor Y, because open-source solutions provide the most control over the AI system.
   • DVendor Y, because open-source platforms are always cheaper and more flexible.
   Reveal Solution Discussion Select an answer first