Policy Design CRAGE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A social media company is designing an AI governance policy for a content moderation system. The policy must respect freedom of expression while also complying with the EU AI Act's transparency requirements for AI-generated content. Which policy provision best addresses both ethical and regulatory considerations?

   • AProhibit all automated content moderation to avoid any risk of suppressing free speech.
   • BLabel AI-generated content only when users request it, to minimize regulatory burden.
   • CProvide an appeals process only for content that is flagged by human moderators, not AI.
   • DRequire clear labeling of AI-generated content while establishing an appeals process for content removal decisions.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which risk assessment framework is specifically designed to evaluate risks from AI systems and is referenced in the EU AI Act?

   • AThe risk-based approach embedded in the EU AI Act itself
   • BCOBIT 2019
   • CISO/IEC 42001
   • DNIST AI Risk Management Framework
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A government agency is designing an AI governance policy for a benefits eligibility system. The policy must be transparent to citizens while also protecting their privacy. Which policy design best balances transparency and privacy?

   • AKeep all details about the system confidential to protect privacy, with no public explanation.
   • BPublish the complete source code and training data of the system to maximize transparency.
   • CPublish a plain-language explanation of how the system makes decisions while keeping the underlying model details confidential.
   • DProvide a detailed technical report to each citizen explaining the system's algorithms.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which regulatory requirement, associated with GDPR, should an AI governance policy address when personal data is used in AI systems?

   • AData subject rights, such as the right to explanation
   • BMandatory certification of all AI models
   • CProhibition of all automated decision-making
   • DRequirement to store data only in the EU
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A bank is designing an AI governance policy for a loan approval system. The system uses sensitive personal data and may be subject to GDPR and the EU AI Act. The policy must ensure accountability and transparency. Which combination of policy elements best achieves this?

   • APublish the model's source code publicly to ensure full transparency and accountability.
   • BCreate an internal audit committee that reviews the model annually, but do not document individual decisions.
   • CAssign a named person responsible for the AI system's outcomes, require documentation of decision logic, and establish a process for customers to request explanations.
   • DRely on the model's high accuracy as evidence of fairness, and do not assign a specific owner.
   Reveal Solution Discussion Select an answer first