Compliance Auditing CRAGE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which audit procedure is most appropriate for understanding how AI governance processes are actually performed in practice?

   • AInterviewing the data scientists and AI governance personnel
   • BAnalyzing the AI model's performance metrics
   • CInterviewing the AI system's end users
   • DReviewing the organization's public website
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   An auditor is evaluating an AI system that recommends insurance premiums. The organization claims that the system has been tested for bias, but the auditor finds that the test reports only cover the most recent model version, while the system has been updated multiple times in the past year. What is the most appropriate audit conclusion?

   • AThe auditor should request a new bias test for the current version only.
   • BThe auditor should accept the latest test report as sufficient evidence.
   • CThe system is compliant because the latest version has been tested for bias.
   • DThe evidence is insufficient to conclude that the system is compliant for the entire audit period.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   During audit planning, what is the first step in scoping a compliance audit for AI systems?

   • ASelect the audit team members and assign roles
   • BIdentify all applicable AI regulations and standards
   • CDevelop a detailed audit checklist
   • DSchedule interviews with all AI system developers
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An auditor is verifying that an AI recruitment tool complies with the EU AI Act's transparency requirements. The organization claims that users are informed when interacting with the AI system. Which audit procedure would most directly test this claim?

   • AInterview the product manager to confirm that a disclosure message was designed.
   • BReview the organization's transparency policy document.
   • CAsk the development team to demonstrate the disclosure in a test environment.
   • DReview the user interface code to check for a disclosure message before the AI interaction begins.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is an example of reliable evidence for a compliance audit?

   • AA verbal statement from a developer about how the system works
   • BAn anonymous tip from an employee about potential non-compliance
   • CA marketing brochure describing the AI system's features
   • DA system-generated audit log showing access to training data
   Reveal Solution Discussion Select an answer first