What is the primary goal of maintaining an inventory of PII within an AI data governance framework?

To measure the performance of the AI model against a benchmark

To provide a list of data to sell to third-party vendors

To know where PII resides and to enable proper management of its lifecycle

To create a backup of all data in case of a system failure

Under the California Consumer Privacy Act (CCPA), what is the primary right of a consumer regarding their personal information collected by a business for AI training?

The right to receive monetary compensation for the use of their data

The right to know what personal information is collected and how it is used

The right to demand a free copy of the AI model's source code

The right to force the business to use the AI model for their personal benefit

A government agency is deploying an AI system that uses citizens' personal data to automate eligibility decisions for public benefits. Before deployment, the agency must identify and mitigate privacy risks, including potential bias and unintended data use. What should the agency do first?

Immediately deploy the model and monitor for privacy complaints

Obtain consent from all citizens before processing their data

Conduct a Privacy Impact Assessment (PIA) to systematically evaluate the data flows, risks, and mitigations

Delete all personal data and use only synthetic data

A German bank is developing an AI system to approve loan applications. The system processes personal financial data. The bank must comply with GDPR, including data protection by design and by default. What is a concrete implementation of this principle?

Collect only the minimum personal data necessary for the loan decision and restrict access to it

Collect as much data as possible to improve the model's accuracy

Share data with third parties for research without consent

Store all data indefinitely for future model improvements

PMICertified Professional in Managing AI (PMI-CPMAI)

Domain 1Objective 1

Oversee Privacy and Security Plan PMI-CPMAI Practice Questions (Page 5)

Part of the Support Responsible and Trustworthy AI Efforts domain, which accounts for 15% of the PMI-CPMAI exam. PMI does not publish an official question count, but from its 160-minute exam (~65–105 total, ~10–16 in this domain), expect 2–3 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

15%of the exam

Questions 21–25

21foundation · easy
What is the primary goal of maintaining an inventory of PII within an AI data governance framework?
Select an answer first
22foundation · easy
Under the California Consumer Privacy Act (CCPA), what is the primary right of a consumer regarding their personal information collected by a business for AI training?
Select an answer first
23application · medium
A government agency is deploying an AI system that uses citizens' personal data to automate eligibility decisions for public benefits. Before deployment, the agency must identify and mitigate privacy risks, including potential bias and unintended data use. What should the agency do first?
Select an answer first
24application · medium
A German bank is developing an AI system to approve loan applications. The system processes personal financial data. The bank must comply with GDPR, including data protection by design and by default. What is a concrete implementation of this principle?
Select an answer first
25foundation · easy
Which encryption technique is specifically used to protect data when it is being transmitted between a data source and an AI training environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PMI-CPMAI

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by PMI. “PMI-CPMAI” is a trademark of its owner, used for identification only.