Audit Planning and Design AAIA Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which component of an AI audit plan defines the boundaries of the audit engagement?

   • AAudit objectives
   • BAudit scope
   • CAudit team
   • DAudit criteria
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following could be used as audit criteria for an AI audit?

   • AThe marketing claims made about the AI system
   • BThe system's user interface design guidelines
   • CThe organization's internal AI ethics policy
   • DThe auditor's personal opinion on AI best practices
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the main benefit of using a risk-based approach in AI audit planning?

   • AIt ensures all risks are eliminated before the audit begins
   • BIt guarantees that the audit will find all possible issues
   • CIt eliminates the need for audit testing
   • DIt allows efficient allocation of audit resources to high-risk areas
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An audit team is planning an audit of an AI system that automates customer service responses. The system was developed by an external vendor and is integrated with the company's CRM. The audit sponsor is the Chief Customer Officer. Which stakeholder engagement strategy should the audit team adopt?

   • AIdentify and engage with the vendor, the CRM team, customer service managers, and the audit sponsor to understand expectations and gather information.
   • BOnly communicate with the audit sponsor to avoid overwhelming stakeholders with audit requests.
   • CWait until the audit is complete to share findings with stakeholders to avoid influencing the process.
   • DEngage only with the external vendor, as they are responsible for the system's development.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In a risk-based audit approach, how are audit focus areas typically determined?

   • ABy prioritizing areas with the highest potential impact and likelihood of AI-related risks
   • BBy focusing only on areas that have experienced past failures
   • CBy auditing all areas equally regardless of risk level
   • DBy selecting areas based on auditor personal interest
   Reveal Solution Discussion Select an answer first