AI Risk and Threat Management CRAGE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is a key component of an AI incident response plan?

   • AA policy to delete all logs after an incident
   • BA guarantee that incidents will never occur
   • CDefined roles and responsibilities for incident response team members
   • DA single generic response procedure for all AI incidents
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A telecom company has deployed an AI model to predict customer churn. The model was developed by a third-party vendor and is hosted on the vendor's cloud. The company's risk team is responsible for ongoing monitoring. The vendor provides a dashboard with model performance metrics, but the company cannot access the raw data or logs. The company is subject to data protection regulations. What is the most significant gap in this monitoring arrangement?

   • AThe company may not have a clear escalation path for when the model fails.
   • BThe company cannot independently verify the model's performance or audit the vendor's monitoring data, creating a lack of transparency and control.
   • CThe vendor's dashboard may not include all relevant metrics, such as fairness or drift.
   • DThe vendor may not comply with data protection regulations.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   In the context of AI risk identification, which activity best represents categorizing a newly discovered risk?

   • ACalculating the financial loss that would occur if the risk materializes.
   • BAssigning the risk to a category such as technical, operational, or societal based on its nature and impact.
   • CImplementing a monitoring dashboard to track the risk over time.
   • DDeciding whether to accept the risk based on the organization's risk appetite.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which of the following is an example of an AI risk governance framework?

   • AITIL
   • BNIST AI Risk Management Framework
   • CCOBIT
   • DTOGAF
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is the primary purpose of continuous monitoring in AI risk management?

   • ATo replace the need for periodic risk assessments
   • BTo guarantee that all AI risks are eliminated
   • CTo track the AI system's risk posture over time and detect changes that may require adjustments
   • DTo provide a one-time snapshot of risks at deployment
   Reveal Solution Discussion Select an answer first