AI Governance and Frameworks CRAGE Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A social media company is deploying an AI content moderation system. The system may inadvertently suppress free speech or fail to remove harmful content. The company's risk team wants to integrate these risks into its enterprise risk management. Which action best addresses the trade-off between free speech and safety?

   • ASet the system to remove only content that clearly violates policies to protect free speech.
   • BSet the system to remove all potentially harmful content to minimize safety risks.
   • CDefine the company's risk appetite for content moderation and set thresholds for false positives and false negatives.
   • DOutsource content moderation decisions to a third-party vendor.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A logistics company is adopting an AI system to optimize delivery routes. The company wants to align its AI governance policy with the NIST AI RMF. The policy must also satisfy customer expectations for transparency about how delivery times are estimated. Which policy component is most aligned with NIST AI RMF's 'Govern' function?

   • APublish a public statement about the company's AI ethics principles.
   • BConduct monthly audits of the AI system's route optimization accuracy.
   • CEstablish a cross-functional AI governance committee with defined roles for risk management and oversight.
   • DImplement a technical tool that explains each route decision in real time.
   Reveal Solution Discussion Select an answer first
4. 43expert · medium

   An organization has an AI system that has been in production for a year. An internal audit reveals that the system's performance has degraded for a specific demographic group. The audit team must decide how to report this finding. The organization has a governance committee and a risk management framework. Which reporting approach is most appropriate?

   • ADelay reporting until the next scheduled audit to avoid disrupting operations.
   • BReport the finding only to the legal team to assess regulatory exposure.
   • CReport the finding only to the data science team so they can fix the model quietly.
   • DReport the finding to the AI governance committee and the enterprise risk team, and recommend a corrective action plan.
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   An organization deploys an AI system that recommends loan approvals. To comply with AI governance principles, the organization ensures that a designated manager is responsible for the system's outcomes and that affected individuals can request a review by a human. Which two core principles are being applied?

   • AHuman oversight and fairness
   • BTransparency and fairness
   • CAccountability and transparency
   • DAccountability and human oversight
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A telecommunications company is deploying an AI system for network fault prediction. The system uses real-time data and is critical to network reliability. The company wants to integrate AI risk management into its existing IT risk management process. Which action should the company take?

   • AConduct a one-time risk assessment and then stop
   • BRely on the AI vendor to manage all risks
   • CAdd AI-specific risk categories to the existing IT risk register
   • DCreate a separate risk management process for AI systems
   Reveal Solution Discussion Select an answer first