AI Risk Assessment, Thresholds, and Treatment AAISM Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the purpose of evaluating AI risks against established criteria?

   • ATo automatically select the cheapest treatment option
   • BTo assign a unique identifier to each risk for tracking purposes
   • CTo prioritize risks for treatment based on severity and organizational context
   • DTo determine the root cause of each risk
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company has implemented a risk treatment plan for an AI system that includes regular model retraining to address data drift. The risk manager is setting up a monitoring process. What is the most effective approach to monitor the effectiveness of the treatment?

   • AConduct a full risk assessment after each model retraining.
   • BWait for a regulatory audit to identify any issues.
   • CEstablish key risk indicators (KRIs) related to model performance and data drift, and review them on a regular schedule.
   • DRely on the AI vendor's monitoring reports without independent verification.
   Reveal Solution Discussion Select an answer first
4. 28application · medium · select all that apply

   A government agency is deploying an AI system for citizen service automation. The risk team is identifying potential AI risks. Which techniques are appropriate for AI risk identification? (Select all that apply.)

   • AVulnerability scanning of the AI model's underlying infrastructure.
   • BThreat modeling to identify potential attack vectors on the AI system.
   • CStakeholder input from users, developers, and legal experts.
   • DA financial audit of the AI project's budget.
   Check answers Discussion Select an answer first
5. 29foundation · easy

   Which statement best describes the relationship between risk appetite and risk tolerance?

   • ARisk appetite is the overall level of risk an organization is willing to accept, while risk tolerance is the acceptable variation around specific risk levels
   • BRisk tolerance is the overall level of risk, while risk appetite is the acceptable variation
   • CRisk appetite is set by regulators, while risk tolerance is set by the organization
   • DRisk appetite and risk tolerance are the same thing
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which element is typically included in a risk treatment plan?

   • AA list of all identified risks without prioritization
   • BA timeline for implementing each treatment action
   • CA summary of the organization's risk appetite
   • DA detailed description of the AI model's architecture
   Reveal Solution Discussion Select an answer first