AAIR

AAIR practice questions, page 4 of 4, with answer review and explanations.

Question 16

Which of the following is the PRIMARY benefit of defining and documenting a RACI matrix for AI solution development and deployment?

  1. It facilitates collaboration between operational and technical teams on AI decision making.
  2. It consolidates AI governance authority and oversight within senior organization leadership.
  3. It strengthens governance over AI technical development activities and enterprise architecture (EA).
  4. It establishes responsibility and decision authority for AI project outcomes and risk management.

Question 17

Which of the following is a risk practitioner’s BEST justification for embedding AI risk considerations into acceptable use policies?

  1. Addressing the potential for shadow AI by defining an allow list for AI tools
  2. Applying uniform risk controls across diverse business functions
  3. Maintaining alignment of enterprise tolerance across decision-making systems
  4. Assigning AI risk accountability to business unit leadership

Question 18

An organization adopts a third-party AI service under a shared responsibility model. Which of the following is the MOST important area of focus for the risk practitioner?

  1. Comprehensive staff training on operational procedures and escalation
  2. Contractual clauses defining liability and remediation timelines
  3. Testing data pathways for confidentiality, integrity, and provenance
  4. Documented assignment of control ownership and decision authority