Practice tests · 47 items

AI Governance, Risk & Compliance practice test

AI risk frameworks, AI security posture management (AI-SPM), data and tool inventories, control evidence and compliance reporting. Review vendor and acquisition risk with scoped authority, accountable exceptions and explicit assessment gaps. The pool for this topic holds 10 easy, 25 medium and 12 hard items. Each answer comes with its reasoning and a link to the question or concept page it was drawn from.

Configure a test

Topic

Difficulty

Questions

10 in this pool · about 7 min

Reveal answers

Sample items with answers

easy · sample

How does the EU AI Act sort AI systems?

By model size alone

✓By the risk of the use: prohibited, high-risk, transparency duties, minimal

By the country where the model was trained and where the provider has its headquarters

By whether the model is open source or sold under a commercial licence

The Act (Regulation (EU) 2024/1689) regulates uses more than technologies. The same model can be minimal risk in a spam filter and high-risk in a hiring tool. General-purpose AI models have a separate set of duties on top of the use-based tiers.

easy · sample

What are the four functions of the NIST AI Risk Management Framework?

✓Govern, Map, Measure and Manage

Identify, Protect, Detect, Respond

Plan, Do, Check, Act

Assess, Authorize, Monitor and Retire

AI RMF 1.0 (January 2023) organizes activity into Govern (culture, roles, policy), Map (context and risks), Measure (assessment and testing) and Manage (prioritising and treating risks). Identify, Protect, Detect, Respond belong to the NIST Cybersecurity Framework.

After the test

Choosing from options is easier than reasoning it out in front of a panel. These pages make you reason it out: