Exam Bundle

This response relates instead to proprietary vendor model, for which an example concern is: Procurement selects a proprietary AI provider without checking model change notices, data handling, or service continuity. It could be useful in that different situation, but it would not directly address the edge inference suitability deficiency reported at a logistics technology company in Hamburg. The targeted acceptance criterion here is: Tests show acceptable offline response and safe synchronization when connectivity returns.

This response relates instead to on-premises option, for which an example concern is: An organization assumes moving an AI model on-premises automatically makes it safe despite missing patching and monitoring capabilities. It could be useful in that different situation, but it would not directly address the edge inference suitability deficiency reported at a logistics technology company in Hamburg. The targeted acceptance criterion here is: Tests show acceptable offline response and safe synchronization when connectivity returns.

This response relates instead to small versus large model, for which an example concern is: An edge device must operate offline, but a team selects a large remote model based only on headline benchmark scores. It could be useful in that different situation, but it would not directly address the edge inference suitability deficiency reported at a logistics technology company in Hamburg. The targeted acceptance criterion here is: Tests show acceptable offline response and safe synchronization when connectivity returns.

This result would support small versus large model, a distinct governance need illustrated by: An edge device must operate offline, but a team selects a large remote model based only on headline benchmark scores. For the reported edge inference suitability issue at a logistics technology company in Hamburg, the relevant corrective action is: Assess edge inference where resilience and latency demands justify local execution. The offered observation does not establish whether that targeted control succeeded.

This result would support classic versus generative choice, a distinct governance need illustrated by: A team chooses an open-ended generative model to perform a simple constrained numerical classification without comparing simpler alternatives. For the reported edge inference suitability issue at a logistics technology company in Hamburg, the relevant corrective action is: Assess edge inference where resilience and latency demands justify local execution. The offered observation does not establish whether that targeted control succeeded.

This result would support agentic orchestration risk, a distinct governance need illustrated by: A multi-agent workflow executes purchases and messages without explicit tool permission or a plan for cascading failures. For the reported edge inference suitability issue at a logistics technology company in Hamburg, the relevant corrective action is: Assess edge inference where resilience and latency demands justify local execution. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to incident classification, for which an example concern is: An AI response causes an unsafe operational action, but support treats it as a cosmetic content-quality bug. It could be useful in that different situation, but it would not directly address the feedback-to-maintenance loop deficiency reported at a regional technology consortium in Auckland. The targeted acceptance criterion here is: Tracked issues lead to model or process improvements and subsequent verification.

This response relates instead to concept drift, for which an example concern is: A prediction model's learned relationship degrades after policy changes although the input-value distribution appears stable. It could be useful in that different situation, but it would not directly address the feedback-to-maintenance loop deficiency reported at a regional technology consortium in Auckland. The targeted acceptance criterion here is: Tracked issues lead to model or process improvements and subsequent verification.

This response relates instead to continuous model monitoring, for which an example concern is: A production classifier has no monitoring because engineers assume prelaunch validation remains sufficient forever. It could be useful in that different situation, but it would not directly address the feedback-to-maintenance loop deficiency reported at a regional technology consortium in Auckland. The targeted acceptance criterion here is: Tracked issues lead to model or process improvements and subsequent verification.

This result would support post-release audit cadence, a distinct governance need illustrated by: A regulated AI service was approved once and has no periodic review of logs, access, or control effectiveness. For the reported feedback-to-maintenance loop issue at a regional technology consortium in Auckland, the relevant corrective action is: Connect user feedback, complaints, and operational incidents to prioritized maintenance actions. The offered observation does not establish whether that targeted control succeeded.

This result would support concept drift, a distinct governance need illustrated by: A prediction model's learned relationship degrades after policy changes although the input-value distribution appears stable. For the reported feedback-to-maintenance loop issue at a regional technology consortium in Auckland, the relevant corrective action is: Connect user feedback, complaints, and operational incidents to prioritized maintenance actions. The offered observation does not establish whether that targeted control succeeded.

This result would support release-readiness evidence, a distinct governance need illustrated by: A new model is promoted into production while safety-test failures and unresolved critical issues remain undocumented. For the reported feedback-to-maintenance loop issue at a regional technology consortium in Auckland, the relevant corrective action is: Connect user feedback, complaints, and operational incidents to prioritized maintenance actions. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to copyright in training data, for which an example concern is: A model team scrapes copyrighted technical manuals for training and treats public accessibility as a universal license. It could be useful in that different situation, but it would not directly address the confidential business material deficiency reported at a multinational employer in Berlin. The targeted acceptance criterion here is: Approved tools and disclosure controls keep restricted business material within authorized processing arrangements.

This response relates instead to credit fairness, for which an example concern is: A lender checks statistical prediction accuracy but ignores how its automated score affects borrowers subject to fair-lending rules. It could be useful in that different situation, but it would not directly address the confidential business material deficiency reported at a multinational employer in Berlin. The targeted acceptance criterion here is: Approved tools and disclosure controls keep restricted business material within authorized processing arrangements.

This response relates instead to consumer deception, for which an example concern is: An AI-powered shopping assistant claims it performed a professional inspection that never occurred. It could be useful in that different situation, but it would not directly address the confidential business material deficiency reported at a multinational employer in Berlin. The targeted acceptance criterion here is: Approved tools and disclosure controls keep restricted business material within authorized processing arrangements.

This result would support consumer deception, a distinct governance need illustrated by: An AI-powered shopping assistant claims it performed a professional inspection that never occurred. For the reported confidential business material issue at a multinational employer in Berlin, the relevant corrective action is: Apply contractual and trade-secret safeguards before disclosing protected information to AI suppliers. The offered observation does not establish whether that targeted control succeeded.

This result would support credit fairness, a distinct governance need illustrated by: A lender checks statistical prediction accuracy but ignores how its automated score affects borrowers subject to fair-lending rules. For the reported confidential business material issue at a multinational employer in Berlin, the relevant corrective action is: Apply contractual and trade-secret safeguards before disclosing protected information to AI suppliers. The offered observation does not establish whether that targeted control succeeded.

This result would support copyright in training data, a distinct governance need illustrated by: A model team scrapes copyrighted technical manuals for training and treats public accessibility as a universal license. For the reported confidential business material issue at a multinational employer in Berlin, the relevant corrective action is: Apply contractual and trade-secret safeguards before disclosing protected information to AI suppliers. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to data dependency and drift, for which an example concern is: A prediction service trained on urban customers is introduced into rural locations with very different input distributions but no new validation. It could be useful in that different situation, but it would not directly address the training versus inference deficiency reported at a corporate HR program in Amsterdam. The targeted acceptance criterion here is: The inventory identifies retraining events separately from routine requests and responses.

This response relates instead to autonomous agent boundaries, for which an example concern is: An agent is permitted to make irreversible account changes on its own because it performed well in a few chat demonstrations. It could be useful in that different situation, but it would not directly address the training versus inference deficiency reported at a corporate HR program in Amsterdam. The targeted acceptance criterion here is: The inventory identifies retraining events separately from routine requests and responses.

This response relates instead to algorithmic unfairness, for which an example concern is: An AI screening tool achieves high overall accuracy while a protected demographic group has substantially worse false-negative rates. It could be useful in that different situation, but it would not directly address the training versus inference deficiency reported at a corporate HR program in Amsterdam. The targeted acceptance criterion here is: The inventory identifies retraining events separately from routine requests and responses.

This result would support autonomous agent boundaries, a distinct governance need illustrated by: An agent is permitted to make irreversible account changes on its own because it performed well in a few chat demonstrations. For the reported training versus inference issue at a corporate HR program in Amsterdam, the relevant corrective action is: Distinguish model training and parameter updates from inference-time generation in the governance inventory. The offered observation does not establish whether that targeted control succeeded.

This result would support algorithmic unfairness, a distinct governance need illustrated by: An AI screening tool achieves high overall accuracy while a protected demographic group has substantially worse false-negative rates. For the reported training versus inference issue at a corporate HR program in Amsterdam, the relevant corrective action is: Distinguish model training and parameter updates from inference-time generation in the governance inventory. The offered observation does not establish whether that targeted control succeeded.

This result would support data dependency and drift, a distinct governance need illustrated by: A prediction service trained on urban customers is introduced into rural locations with very different input distributions but no new validation. For the reported training versus inference issue at a corporate HR program in Amsterdam, the relevant corrective action is: Distinguish model training and parameter updates from inference-time generation in the governance inventory. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to ai end-user training, for which an example concern is: New frontline users trust every generated recommendation because the training explains features but omits failure modes. It could be useful in that different situation, but it would not directly address the incident containment deficiency reported at an enterprise digital assurance office in Toronto. The targeted acceptance criterion here is: Incident logs show exposures halted and required stakeholders notified promptly.

This response relates instead to end-of-life and archival controls, for which an example concern is: A retired AI service remains reachable through an undocumented integration and continues receiving user data. It could be useful in that different situation, but it would not directly address the incident containment deficiency reported at an enterprise digital assurance office in Toronto. The targeted acceptance criterion here is: Incident logs show exposures halted and required stakeholders notified promptly.

This response relates instead to threat modeling new data flow, for which an example concern is: A deployed assistant is connected to a new internal file store, but the team does not update its leakage threat model. It could be useful in that different situation, but it would not directly address the incident containment deficiency reported at an enterprise digital assurance office in Toronto. The targeted acceptance criterion here is: Incident logs show exposures halted and required stakeholders notified promptly.

This result would support safety and reliability monitoring, a distinct governance need illustrated by: An AI-powered workflow is monitored only for uptime while harmful errors can occur even when the service is available. For the reported incident containment issue at an enterprise digital assurance office in Toronto, the relevant corrective action is: Activate risk-proportionate containment such as blocking affected features or restricting access. The offered observation does not establish whether that targeted control succeeded.

This result would support external incident communications, a distinct governance need illustrated by: A harmful AI incident draws public inquiries, but teams issue contradictory statements with no approved communication responsibility. For the reported incident containment issue at an enterprise digital assurance office in Toronto, the relevant corrective action is: Activate risk-proportionate containment such as blocking affected features or restricting access. The offered observation does not establish whether that targeted control succeeded.

This result would support ai end-user training, a distinct governance need illustrated by: New frontline users trust every generated recommendation because the training explains features but omits failure modes. For the reported incident containment issue at an enterprise digital assurance office in Toronto, the relevant corrective action is: Activate risk-proportionate containment such as blocking affected features or restricting access. The offered observation does not establish whether that targeted control succeeded.