Audit Readiness CRAGE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the purpose of continuous readiness monitoring in AI audit readiness?

   • ATo automate the entire audit process without human involvement.
   • BTo eliminate the need for any future audits.
   • CTo reduce the accuracy of AI models.
   • DTo ensure that the organization remains prepared for audits as regulations and systems evolve.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A healthcare organization is preparing for an external audit of its AI-based patient triage system. The auditor has stated that the audit will focus on compliance with the EU AI Act's requirements for high-risk AI systems. The organization has already conducted an internal gap analysis and found that its documentation of training data provenance is incomplete. What should the organization do FIRST to improve its audit readiness?

   • ADefine the audit scope and criteria based on the EU AI Act and map them to existing documentation
   • BHire an external consultant to conduct a full independent audit of the AI system
   • CImmediately begin collecting all training data logs and storing them in a centralized repository
   • DUpdate the AI system's algorithm to eliminate the need for training data documentation
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A telecom company uses an AI system for network anomaly detection. During an audit preparation review, the team finds that the system's audit logs do not record the identity of users who access the AI model's configuration. What is the most important reason to fix this?

   • ATo improve the model's detection accuracy
   • BTo comply with the company's password policy
   • CTo ensure traceability of changes to the model, which is essential for demonstrating compliance
   • DTo reduce the storage space required for logs
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A manufacturing company is preparing for an audit of its AI-powered quality control system. The audit will require evidence of model validation, data quality checks, and incident response logs. The company has a small team and no dedicated compliance officer. Which stakeholder role is most critical to assign to ensure audit readiness?

   • AThe legal team, which will review all documentation for compliance
   • BThe IT department, which will provide all technical logs and system access
   • CA designated audit coordinator who owns the evidence collection and communication with the auditor
   • DThe data science team, which will explain the model to the auditor
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An online payment platform uses a machine learning model to detect fraudulent transactions. During a regulatory inspection, the inspector asks for evidence that the model's decisions can be traced back to specific training data and feature values. The platform's logging system currently records only the final decision (approve/decline) and the timestamp. What is the most critical gap in the current audit trail?

   • AThe logs do not capture the input features and model version used for each decision.
   • BThe logs are not encrypted at rest, which could compromise their integrity.
   • CThe logs are stored in a cloud database that is not accessible to the inspector.
   • DThe logs are deleted after 30 days, which may be shorter than the regulatory retention period.
   Reveal Solution Discussion Select an answer first