NIST AI RMF Alignment CRAGE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is using the NIST AI RMF Map function for a new AI system that recommends content to users. The team is identifying stakeholders. Which stakeholder group is most important to include?

   • AThe IT helpdesk, as they will support the system.
   • BThe company's shareholders, as they are interested in financial performance.
   • CEnd users who receive the recommendations, as they are directly affected by the system's outputs.
   • DThe marketing team, as they will promote the system.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of the Map function in the NIST AI RMF?

   • ATo establish governance policies and assign roles
   • BTo quantitatively measure the likelihood and impact of risks
   • CTo implement risk mitigation strategies and controls
   • DTo understand the context of AI risks by identifying uses, stakeholders, and potential impacts
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A government agency is using the NIST AI RMF to assess a facial-recognition system for public safety. The Map function has identified potential civil-liberties impacts. The agency must decide how to proceed with measurement. Which approach best balances the need for rigorous measurement with the agency's resource constraints?

   • AMeasure all possible risks equally to ensure comprehensive coverage, even if it exceeds the budget.
   • BUse only qualitative assessments because they are less expensive than quantitative methods.
   • CPrioritize the civil-liberties risk for measurement using both quantitative accuracy metrics across demographic groups and qualitative community impact assessments.
   • DDefer measurement until after deployment to collect real-world data.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is developing an AI system for hiring. The Map function has identified that the system may have disparate impact on certain demographic groups. The company must decide how to proceed. Which approach best aligns with the NIST AI RMF's emphasis on context and risk management?

   • AImmediately halt development of the AI system to avoid any potential harm.
   • BConduct a detailed impact assessment that includes input from affected communities and domain experts, and use the findings to inform risk measurement and management decisions.
   • CProceed with development and address any disparate impact only after the system is deployed and complaints arise.
   • DRely solely on quantitative data to assess the impact, without engaging stakeholders.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A manufacturing company has identified several risks in its AI-based quality control system, including false rejection rates that could impact customer satisfaction. Using the NIST AI RMF Manage function, what should the company do first?

   • APrioritize the identified risks based on likelihood and impact, then select and implement appropriate risk response strategies (e.g., mitigate, transfer, avoid, accept).
   • BDocument the risks in a register and wait for the next annual review to decide on responses.
   • CCommunicate the risks to customers before deciding on any internal response.
   • DImmediately implement a technical fix to reduce the false rejection rate without assessing other risks.
   Reveal Solution Discussion Select an answer first