AAIR

AAIR practice questions, page 3 of 4, with answer review and explanations.

Question 11

A risk practitioner learns that an organization's AI inventory includes separate listings of AI systems, models, and datasets. Which of the following is the risk practitioner's BEST recommendation to improve AI governance?

  1. Map interdependencies between AI assets continuously.
  2. Include information about model training frequency.
  3. Automate inventory reconciliation steps.
  4. Assign inventory oversight to the AI risk committee.

Question 12

An organization plans to deploy a generative AI system that processes sensitive personal data across multiple countries with varying privacy laws. Which of the following is the BEST course of action to manage legal and regulatory exposure?

  1. Remediate regulatory gaps in each jurisdiction through iterative post-deployment updates and model retraining.
  2. Tailor organizational controls to relevant statutory requirements and preserve audit trails to prove adherence.
  3. Adopt uniform global policies and implement strong encryption of personal data for all cross-border transfers.
  4. Prioritize protection of intellectual property and restrict disclosure of model operations to safeguard assets.

Question 13

Which of the following is the PRIMARY benefit of integrating AI risk processes into an enterprise risk framework?

  1. More accurate benchmarking of AI key performance indicators (KPIs)
  2. Improved compliance with regulatory requirements
  3. Rapid identification of cyber threats and risks
  4. Organization-level oversight and strategic alignment

Question 14

Which of the following is MOST important to evaluate when selecting a vendor for a third-party large language model (LLM)?

  1. Whether the vendor's service level agreements (SLAs) align with corporate strategy
  2. How the vendor selects machine learning (ML) methods
  3. Whether the vendor offers subscription-based service options
  4. How the vendor handles data during model training and inference

Question 15

An organization intends to implement an AI system that poses significant societal risk and interfaces with critical infrastructure and public services. Which of the following is the BEST course of action?

  1. Conduct a comprehensive pre-launch evaluation of potential adverse impacts and compliance obligations.
  2. Engage external consultants with expertise on measuring broad societal impacts.
  3. Restrict disclosure of model internal operations to safeguard proprietary algorithms and protect trade secrets.
  4. Conduct parallel model evaluation to quantify the impact of system operations.