AIGP practice questions 151–160

1. Question 151 · 161 in bank

   The best practice to manage third-party risk associated with AI systems is to create and implement policies that:

   • AFocus on the financial stability of third-party vendors as the primary criterion for risk assessment.
   • BProvide for an appropriate level of due diligence and ongoing monitoring based on the defined risk.
   • CRequire third-party AI systems to undergo a comprehensive audit by an external cybersecurity firm every six months.
   • DFocus on the technical aspects of AI systems, such as data security, while ethical risks are addressed through suitable contracts.

   Show answer

   Answer: B

   Next question

2. Question 152 · 161 in bank

   In procuring an AI system from a vendor, which of the following would be important to include in a contract to enable proper oversight and auditing of the system?

   • ALiability for mistakes.
   • BOwnership of data and outputs.
   • CResponsibility for improvements.
   • DAppropriate access to data and models.

   Show answer

   Answer: D

   Next question

3. Question 153 · 161 in bank

   Codes of conduct and collective agreements are what type of assessment tools as defined by the Organization for Economic Cooperation and Development (OECD)?

   • AEducational.
   • BProcedural.
   • CTechnical.
   • DAnalytic.

   Show answer

   Answer: B

   Next question

4. Question 154 · 161 in bank

   An organization will be introducing a new internal application that will use AI to make automated decisions about individuals whose personal information will be processed. Which of the following documents must be updated to ensure transparency?

   • AThe organization’s website privacy notice.
   • BThe organization’s acceptable use policy.
   • CThe organization’s privacy policy.
   • DThe user privacy notice

   Show answer

   Answer: D

   Next question

5. Question 155 · 161 in bank

   What is the most important reason to document the results of AI testing?

   • ATo support post-deployment maintenance.
   • BTo identify areas for red-teaming focus.
   • CTo create a verifiable audit trail.
   • DTo limit the need for future testing cycles.

   Show answer

   Answer: C

   Next question

6. Question 156 · 161 in bank

   ISO/IEC 22989 and 42001 can be valuable resources for AI Governance professionals in all of the following ways EXCEPT:

   • AEstablishing terminology and describing concepts so that governance team members can communicate with diverse parties and stakeholders from around the world.
   • BBeing applicable to organizations of any size and industry seeking to use AI responsibly and effectively in their design processes, information systems and controls.
   • CAddressing specific issues related to managing procurement processes with third parties that provide or develop AI systems for their organization.
   • DRecommending key activities to assess and manage risk: test, evaluate, verify and validate (TEVV).

   Show answer

   Answer: C

   Next question

7. Question 157 · 161 in bank

   A company’s AI-powered hiring tool is found to be consistently ranking male candidates higher than female candidates with similar qualifications. Which of the following is the most immediate and critical governance action required to address this issue?

   • ALog the incident in the company’s central AI incident management system.
   • BConduct a comprehensive audit of the AI system’s entire lifecycle.
   • CNotify cross-functional stakeholders.
   • DInitiate a full-scale retraining of the AI model with a more balanced dataset.

   Show answer

   Answer: A

   Next question

8. Question 158 · 161 in bank

   CASE STUDY - Please use the following to answer the next question: You have recently assumed the role of AI Governance leader for a California-based medical technology company. The organization primarily serves hospitals and has recently expanded to include walk-in clinics located within local pharmacies. The company’s core business focuses on diagnostic assistance powered by a large language model (LLM) and back-office process optimization using Agentic AI, including chatbots, medical record request handling, scheduling and billing. In preparation for its next round of funding, the board has asked you to prepare an AI Risk report to demonstrate to investors how the company is addressing AI-related risks. In preparing the report you learn that last year the company generated $30M in gross revenue across the US, EU, India, and South Korea and that vendors are engaged for various activities, including model testing and providing third-party AI solutions for chatbots. Which of the following would provide you the best information addressing quality principles pertaining to the functioning of the AI agents and LLM?

   • AA monthly log of all input data validation checks showing: • the percentage of anomalous or missing data points that were cleaned • the average time it takes for the LLM to generate a response.
   • BThe aggregate count of user feedback: • flagged as ‘Negative’ or ‘Unsatisfactory’ over the past 30 days • categorized by language preference.
   • CReal-time system diagnostics tracking: • the total number of model predictions processed daily • the percentage of high-certainty predictions • a summary of code quality scores from internal software testing tools before deployment.
   • DMonthly statistical measures showing: • the percentages of accuracy by user group • the response category • real world change data.

   Show answer

   Answer: D

   Next question

9. Question 159 · 161 in bank

   A bank is aiming to comply with ISO/IEC 42005:2025, and is studying how to adopt the standard in light of a new AI customer service system that it would like to implement. In addition to the risk management process the bank already has in place to assess the risks of any potential new systems, which of the following actions is the most effective in adopting the ISO/IEC 42005:2025 standard?

   • ACollecting information on the AI system’s performance to document additional AI risks.
   • BAdding AI risks to the risk register and continuing to leverage the existing risk management process.
   • CDefining a standalone AI impact assessment procedure to supplement the existing risk management process.
   • DInstructing AI developers to perform an AI impact assessment before development in addition to the existing risk management process.

   Show answer

   Answer: C

   Next question

10. Question 160 · 161 in bank

    Which of the following best describes the data minimization principle as it relates to an AI model?

    • AInclude techniques such as adding noise or synthetic data.
    • BAvoid training the model on personal data.
    • CReview all the data manually.
    • DOnly use personal data during the inference phase.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AIGP practice, question 151. 161 questions available.