AI Supply Chain Risk Management (e.g., Third Party Resources) AAIR Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is using multiple third-party AI components, including data providers, model developers, and infrastructure vendors. The company wants to establish a consistent approach to managing risks across all these components. Which action is most aligned with the NIST AI RMF?

   • ADelegate risk management to each vendor individually
   • BConduct a comprehensive risk assessment that covers all components and their interconnections
   • CWait for a major incident before implementing risk management
   • DFocus risk management efforts on the model developer, as they have the most influence
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   When using third-party AI resources, which of the following is a compliance consideration?

   • AEnsuring the vendor complies with relevant regulations
   • BEnsuring the vendor has a large number of employees
   • CEnsuring the vendor uses the latest programming languages
   • DEnsuring the vendor has a strong marketing presence
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   When assessing a third-party AI vendor, which of the following is a potential compliance gap to evaluate?

   • AThe vendor's data handling practices
   • BThe vendor's office furniture
   • CThe vendor's marketing budget
   • DThe vendor's employee dress code
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company is adopting an AI system that uses a third-party model and a data provider. The company is subject to ISO/IEC 42001 and must demonstrate compliance. The vendor's security practices are not fully aligned with the standard. What is the most effective approach?

   • AWork with the vendor to develop a remediation plan to align their practices with ISO/IEC 42001 requirements
   • BAccept the vendor's practices as sufficient because they are certified under another standard
   • CTerminate the contract with the vendor and find a fully compliant alternative
   • DDocument the gap and accept the risk without further action
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is a risk that can arise from using third-party AI resources?

   • AGuaranteed regulatory compliance
   • BReduced need for governance
   • CIncreased employee satisfaction
   • DModel bias
   Reveal Solution Discussion Select an answer first