AI Supply Chain Risk Management (e.g., Third Party Resources) AAIR Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What does data provenance refer to in the context of AI supply chains?

   • AThe speed of data transmission
   • BThe origin and history of the data
   • CThe storage capacity of data centers
   • DThe format of data files
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A manufacturing company uses a third-party AI model for predictive maintenance. The vendor has been reliable, but the company wants to ensure that any future issues are detected early. The contract includes audit rights and a data protection clause. What should the company implement to manage ongoing third-party risk?

   • ASchedule quarterly performance reviews with the vendor and track key performance indicators (KPIs)
   • BWait for the vendor to report any issues before taking action
   • CConduct a single annual security audit of the vendor
   • DRely on the existing audit rights and data protection clause as sufficient
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A retail company uses a third-party AI model for demand forecasting. The model's training data includes customer purchase history, but the company cannot determine where the data originated or whether it was legally obtained. The company is subject to data protection regulations. What is the most effective way to address this risk?

   • ARetrain the model using only the company's internal data
   • BRequire the vendor to provide detailed data provenance documentation for all training data
   • CAsk the vendor to sign a statement that the data was legally obtained
   • DSwitch to a different vendor that uses only synthetic data
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the primary purpose of an incident response plan for AI supply chain failures?

   • ATo increase the cost of third-party services
   • BTo eliminate the need for vendor management
   • CTo guarantee that failures never occur
   • DTo minimize the impact of disruptions and restore operations quickly
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which contractual provision allows an organization to verify a vendor's compliance with security and privacy requirements?

   • AAudit rights
   • BNon-disclosure agreement
   • CPayment terms
   • DService level agreement
   Reveal Solution Discussion Select an answer first