A healthcare organization is developing an AI model to predict patient readmission risk. The data science team needs access to patient records for model training, but the compliance team has mandated that only authorized clinical researchers may view the raw data. The organization uses Azure Active Directory for identity management. What should the data governance team implement to satisfy this requirement?

Establish a data classification scheme, inventory the PII, and assign role-based access controls so only the clinical research group can read raw records

Anonymize all patient records so the data science team can freely use the data without access controls

Create a single shared dataset with all patient records and grant the data science team read access

Encrypt the dataset and provide the decryption key to all team members who need to work with the model

A European e-commerce company uses an AI model to personalize product recommendations. A customer submits a request to have their personal data deleted from the training dataset. The company must comply with GDPR. What is the most appropriate action?

Ignore the request because the data is used for legitimate business purposes

Transfer the data to a third country where GDPR does not apply

Delete the customer's data from the training dataset and ensure the model does not retain it

Anonymize the customer's data so it can no longer be linked to the individual

What is the primary objective of conducting a Privacy Impact Assessment (PIA) before deploying an AI model?

To identify and mitigate potential privacy risks associated with the model's data processing activities

To ensure the model is compatible with all web browsers

To calculate the total cost of ownership for the AI infrastructure

To benchmark the model's accuracy against industry standards

In the context of secure data handling across the AI lifecycle, what is the primary purpose of a data disposal procedure?

To archive data for long-term storage in a cost-effective format

To create a backup of the data in case of accidental loss

To permanently and securely delete data that is no longer needed, reducing the risk of unauthorized access

To share data with external partners for further analysis

What is the core principle of least privilege in the context of AI training data access?

Access should be granted to as many users as possible to maximize collaboration

Access should be granted based on the user's seniority in the organization

Users and systems should be granted the minimum level of access necessary to perform their job functions

All users should have the same level of access to ensure consistency

PMICertified Professional in Managing AI (PMI-CPMAI)

Domain 1Objective 1

Oversee Privacy and Security Plan PMI-CPMAI Practice Questions (Page 3)

Part of the Support Responsible and Trustworthy AI Efforts domain, which accounts for 15% of the PMI-CPMAI exam. PMI does not publish an official question count, but from its 160-minute exam (~65–105 total, ~10–16 in this domain), expect 2–3 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

15%of the exam

Questions 11–15

11application · medium
A healthcare organization is developing an AI model to predict patient readmission risk. The data science team needs access to patient records for model training, but the compliance team has mandated that only authorized clinical researchers may view the raw data. The organization uses Azure Active Directory for identity management. What should the data governance team implement to satisfy this requirement?
Select an answer first
12application · medium
A European e-commerce company uses an AI model to personalize product recommendations. A customer submits a request to have their personal data deleted from the training dataset. The company must comply with GDPR. What is the most appropriate action?
Select an answer first
13foundation · easy
What is the primary objective of conducting a Privacy Impact Assessment (PIA) before deploying an AI model?
Select an answer first
14foundation · easy
In the context of secure data handling across the AI lifecycle, what is the primary purpose of a data disposal procedure?
Select an answer first
15foundation · easy
What is the core principle of least privilege in the context of AI training data access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PMI-CPMAI

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by PMI. “PMI-CPMAI” is a trademark of its owner, used for identification only.