AI Regulations, Standards and Frameworks Relevant to GenAI in Software Testing CT-GENAI Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company uses GenAI to generate test cases for a credit scoring system. They have applied the NIST AI RMF and identified a risk of bias in the test data. The company is also subject to the EU AI Act because the credit scoring system is high-risk. What is the most appropriate action to address the bias risk?

   • AStop using GenAI for testing to avoid bias risks.
   • BTransfer the bias risk to the GenAI tool vendor.
   • CImplement a risk treatment plan that includes bias mitigation and document the decision in line with the NIST AI RMF's Manage function.
   • DIgnore the bias risk because the NIST AI RMF is voluntary and not legally binding.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A QA team uses GenAI to generate test cases. They have implemented ISO/IEC 42001 and are now facing a conflict: the GenAI tool produces biased test data, but the team is under pressure to release the software quickly. What is the most appropriate action according to ISO/IEC 42001?

   • ARelease the software and address the bias in the next iteration to meet the deadline.
   • BDocument the bias risk and proceed with the release, as the standard allows risk acceptance.
   • CConduct a risk assessment, document the bias risk, and decide whether to accept or mitigate it based on the organization's risk criteria.
   • DStop using the GenAI tool and manually create all test cases to eliminate bias.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In the NIST AI RMF, which function involves establishing policies and processes to manage AI risks?

   • AGovern
   • BMap
   • CMeasure
   • DManage
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A QA team uses GenAI to generate test scripts. They want to align with ISO/IEC 42001. Which practice is most aligned with the standard's requirement for 'risk assessment'?

   • AConducting a risk assessment at the start of the project and documenting the results.
   • BRelying on the GenAI tool vendor's risk assessment.
   • CSkipping risk assessment because the GenAI tool is used only for testing.
   • DPerforming a risk assessment before deploying the GenAI tool and updating it when significant changes occur.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   An organization uses GenAI to generate test cases and wants to align with ISO/IEC 42001. What should the organization do?

   • AEstablish an AI management system that includes risk assessment and oversight of the GenAI tool
   • BUse only open-source GenAI models
   • CEnsure the GenAI tool is certified by an external body
   • DPublish all test cases generated by the GenAI tool
   Reveal Solution Discussion Select an answer first