Audit Readiness CRAGE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A pharmaceutical company uses AI for drug discovery. The company has a rigorous audit readiness program, but a recent internal review found that some audit logs are missing timestamps due to a misconfiguration. What is the most appropriate action to maintain continuous readiness?

   • AManually add timestamps to the existing logs
   • BFix the misconfiguration and implement automated checks to verify log completeness
   • CIgnore the missing timestamps because the logs are still readable
   • DDisable logging for the affected system until the next audit
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   An e-commerce company uses an AI recommendation system. During a routine review, the compliance team discovers that the system's audit logs are only retained for 30 days, while the company's data retention policy requires 12 months for compliance-related logs. What is the most appropriate action to ensure audit readiness?

   • AExtend the log retention period to 12 months and implement automated alerts for retention policy violations
   • BKeep the 30-day retention but manually back up logs to an external drive
   • CDisable logging for the recommendation system to avoid the retention issue
   • DReduce the retention policy to 30 days to match the current logging practice
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which statement best describes the role of audit readiness in AI governance and assurance?

   • AIt enables an organization to demonstrate, through documented evidence, that its AI systems comply with relevant policies and regulations.
   • BIt replaces the need for external audits by providing self-certification.
   • CIt focuses solely on the technical performance of AI models, ignoring governance processes.
   • DIt ensures that AI systems are always operating without errors.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which method is commonly used to collect evidence during an AI audit?

   • AUsing anecdotal feedback from end users without verification.
   • BReviewing system logs, documentation, and conducting interviews with relevant personnel.
   • CDeleting outdated records to reduce data volume.
   • DRelying solely on the AI system's self-reported accuracy metrics.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   What is the primary purpose of defining audit criteria for an AI audit?

   • ATo select the AI models that will be deployed in production.
   • BTo determine the number of auditors needed for the audit.
   • CTo schedule the audit activities and deadlines.
   • DTo establish the benchmarks or standards against which the AI system will be evaluated.
   Reveal Solution Discussion Select an answer first