AI Risk Treatment Strategies AAIR Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   After implementing a risk treatment for an AI system, an organization conducts an assessment to determine the level of risk that remains. What is this assessment called?

   • AResidual risk assessment
   • BRisk transfer assessment
   • CRisk appetite assessment
   • DInherent risk assessment
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   An organization is evaluating risk treatment options for an AI system. The risk is rated as low likelihood and low impact, and the cost to implement a control exceeds the potential loss. The organization's risk appetite allows for accepting low-level risks. Which treatment option is most appropriate?

   • AAccept
   • BAvoid
   • CMitigate
   • DTransfer
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A retail company decides to mitigate bias risk in its AI hiring tool by adding a fairness audit control. The control must be implemented within 90 days. Which action best demonstrates proper implementation of this risk treatment?

   • APurchase a fairness audit tool and inform the compliance team it is available.
   • BAsk the vendor to provide a fairness report after each model update.
   • CAssign the data science team to run a one-time audit at the end of the 90 days.
   • DDocument the control, assign an owner, set a 90-day timeline, and integrate the audit into the model development lifecycle.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of documenting risk treatment decisions for an AI system?

   • ATo increase the complexity of the risk management process
   • BTo replace the need for ongoing risk monitoring
   • CTo satisfy regulatory requirements only
   • DTo provide a record for accountability and future reference
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   When planning the implementation of a risk treatment for an AI system, which of the following should be included in the plan?

   • AA list of all employees' personal data
   • BThe organization's annual budget for office supplies
   • CIntegration of controls into the AI system lifecycle
   • DThe marketing strategy for the AI product
   Reveal Solution Discussion Select an answer first