Exam Bundle

This result would support agentic orchestration risk, a distinct governance need illustrated by: A multi-agent workflow executes purchases and messages without explicit tool permission or a plan for cascading failures. For the reported on-premises option issue at an enterprise digital assurance office in Toronto, the relevant corrective action is: Evaluate whether local hosting can satisfy security operations, model updates, and resilience responsibilities. The offered observation does not establish whether that targeted control succeeded.

This result would support classic versus generative choice, a distinct governance need illustrated by: A team chooses an open-ended generative model to perform a simple constrained numerical classification without comparing simpler alternatives. For the reported on-premises option issue at an enterprise digital assurance office in Toronto, the relevant corrective action is: Evaluate whether local hosting can satisfy security operations, model updates, and resilience responsibilities. The offered observation does not establish whether that targeted control succeeded.

This result would support cloud deployment trade-offs, a distinct governance need illustrated by: An AI use case includes restricted processing data but the chosen cloud arrangement has not been assessed for residency and vendor access. For the reported on-premises option issue at an enterprise digital assurance office in Toronto, the relevant corrective action is: Evaluate whether local hosting can satisfy security operations, model updates, and resilience responsibilities. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to concept drift, for which an example concern is: A prediction model's learned relationship degrades after policy changes although the input-value distribution appears stable. It could be useful in that different situation, but it would not directly address the safe rollback operations deficiency reported at a software services vendor in Lisbon. The targeted acceptance criterion here is: A rehearsal restores the approved baseline and records recovery decisions and timing.

This response relates instead to retraining governance, for which an example concern is: Automated retraining replaces models weekly without any checks that changes reduce bias or preserve required safety. It could be useful in that different situation, but it would not directly address the safe rollback operations deficiency reported at a software services vendor in Lisbon. The targeted acceptance criterion here is: A rehearsal restores the approved baseline and records recovery decisions and timing.

This response relates instead to continuous model monitoring, for which an example concern is: A production classifier has no monitoring because engineers assume prelaunch validation remains sufficient forever. It could be useful in that different situation, but it would not directly address the safe rollback operations deficiency reported at a software services vendor in Lisbon. The targeted acceptance criterion here is: A rehearsal restores the approved baseline and records recovery decisions and timing.

This result would support concept drift, a distinct governance need illustrated by: A prediction model's learned relationship degrades after policy changes although the input-value distribution appears stable. For the reported safe rollback operations issue at a software services vendor in Lisbon, the relevant corrective action is: Implement and exercise controlled rollback and incident containment for AI releases. The offered observation does not establish whether that targeted control succeeded.

This result would support versioned release artifacts, a distinct governance need illustrated by: The team cannot tell whether production serves the approved model version or an experimental checkpoint. For the reported safe rollback operations issue at a software services vendor in Lisbon, the relevant corrective action is: Implement and exercise controlled rollback and incident containment for AI releases. The offered observation does not establish whether that targeted control succeeded.

This result would support release-readiness evidence, a distinct governance need illustrated by: A new model is promoted into production while safety-test failures and unresolved critical issues remain undocumented. For the reported safe rollback operations issue at a software services vendor in Lisbon, the relevant corrective action is: Implement and exercise controlled rollback and incident containment for AI releases. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to ai system transparency, for which an example concern is: Users interact with a machine-generated assistant while being told they are communicating with a human employee. It could be useful in that different situation, but it would not directly address the training-data governance duty deficiency reported at an enterprise digital assurance office in Toronto. The targeted acceptance criterion here is: Dataset documentation addresses data relevance, error checks, limitations, and selected mitigation.

This response relates instead to conformity assessment planning, for which an example concern is: A vendor claims a high-risk AI product complies merely because internal stakeholders liked its prototype. It could be useful in that different situation, but it would not directly address the training-data governance duty deficiency reported at an enterprise digital assurance office in Toronto. The targeted acceptance criterion here is: Dataset documentation addresses data relevance, error checks, limitations, and selected mitigation.

This response relates instead to applicable-role analysis, for which an example concern is: A reseller integrates and materially changes a third-party AI product but assumes contractual labels alone decide every regulatory obligation. It could be useful in that different situation, but it would not directly address the training-data governance duty deficiency reported at an enterprise digital assurance office in Toronto. The targeted acceptance criterion here is: Dataset documentation addresses data relevance, error checks, limitations, and selected mitigation.

This result would support deployer operational duties, a distinct governance need illustrated by: A customer believes purchasing a compliant high-risk model removes obligations to use it as instructed and monitor local outcomes. For the reported training-data governance duty issue at an enterprise digital assurance office in Toronto, the relevant corrective action is: Set risk-appropriate data governance and dataset-quality procedures for the regulated system. The offered observation does not establish whether that targeted control succeeded.

This result would support human oversight requirements, a distinct governance need illustrated by: A regulated high-risk model advises caseworkers, but they lack training or the practical authority to reject erroneous outputs. For the reported training-data governance duty issue at an enterprise digital assurance office in Toronto, the relevant corrective action is: Set risk-appropriate data governance and dataset-quality procedures for the regulated system. The offered observation does not establish whether that targeted control succeeded.

This result would support gpai model responsibilities, a distinct governance need illustrated by: An organization offering a general-purpose foundation model assumes only downstream app developers ever have governance duties. For the reported training-data governance duty issue at an enterprise digital assurance office in Toronto, the relevant corrective action is: Set risk-appropriate data governance and dataset-quality procedures for the regulated system. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to proprietary vendor model, for which an example concern is: Procurement selects a proprietary AI provider without checking model change notices, data handling, or service continuity. It could be useful in that different situation, but it would not directly address the fine-tuning governance deficiency reported at a technology services group in Stockholm. The targeted acceptance criterion here is: Fine-tuned versions pass privacy and task benchmarks and remain subject to version control.

This response relates instead to small versus large model, for which an example concern is: An edge device must operate offline, but a team selects a large remote model based only on headline benchmark scores. It could be useful in that different situation, but it would not directly address the fine-tuning governance deficiency reported at a technology services group in Stockholm. The targeted acceptance criterion here is: Fine-tuned versions pass privacy and task benchmarks and remain subject to version control.

This response relates instead to rag versus fine-tuning, for which an example concern is: A policy assistant gives outdated answers because its knowledge changes weekly, and the team proposes retraining model weights for every update. It could be useful in that different situation, but it would not directly address the fine-tuning governance deficiency reported at a technology services group in Stockholm. The targeted acceptance criterion here is: Fine-tuned versions pass privacy and task benchmarks and remain subject to version control.

This result would support classic versus generative choice, a distinct governance need illustrated by: A team chooses an open-ended generative model to perform a simple constrained numerical classification without comparing simpler alternatives. For the reported fine-tuning governance issue at a technology services group in Stockholm, the relevant corrective action is: Assess training-data rights, privacy exposure, evaluation, and rollback before fine-tuning. The offered observation does not establish whether that targeted control succeeded.

This result would support multimodal capability decision, a distinct governance need illustrated by: A document workflow requires understanding diagrams and photographs, but procurement tests only text-only model capability. For the reported fine-tuning governance issue at a technology services group in Stockholm, the relevant corrective action is: Assess training-data rights, privacy exposure, evaluation, and rollback before fine-tuning. The offered observation does not establish whether that targeted control succeeded.

This result would support agentic orchestration risk, a distinct governance need illustrated by: A multi-agent workflow executes purchases and messages without explicit tool permission or a plan for cascading failures. For the reported fine-tuning governance issue at a technology services group in Stockholm, the relevant corrective action is: Assess training-data rights, privacy exposure, evaluation, and rollback before fine-tuning. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to external transparency materials, for which an example concern is: Deployers are offered a high-impact model without understandable operational instructions, limitations, or monitoring information. It could be useful in that different situation, but it would not directly address the input data drift deficiency reported at a global platform operator in Berlin. The targeted acceptance criterion here is: Drift alarms trigger analysis of changed populations and model suitability.

This response relates instead to continuous model monitoring, for which an example concern is: A production classifier has no monitoring because engineers assume prelaunch validation remains sufficient forever. It could be useful in that different situation, but it would not directly address the input data drift deficiency reported at a global platform operator in Berlin. The targeted acceptance criterion here is: Drift alarms trigger analysis of changed populations and model suitability.

This response relates instead to concept drift, for which an example concern is: A prediction model's learned relationship degrades after policy changes although the input-value distribution appears stable. It could be useful in that different situation, but it would not directly address the input data drift deficiency reported at a global platform operator in Berlin. The targeted acceptance criterion here is: Drift alarms trigger analysis of changed populations and model suitability.

This result would support continuous model monitoring, a distinct governance need illustrated by: A production classifier has no monitoring because engineers assume prelaunch validation remains sufficient forever. For the reported input data drift issue at a global platform operator in Berlin, the relevant corrective action is: Monitor production input distributions and investigate meaningful shifts relative to approved baselines. The offered observation does not establish whether that targeted control succeeded.

This result would support external transparency materials, a distinct governance need illustrated by: Deployers are offered a high-impact model without understandable operational instructions, limitations, or monitoring information. For the reported input data drift issue at a global platform operator in Berlin, the relevant corrective action is: Monitor production input distributions and investigate meaningful shifts relative to approved baselines. The offered observation does not establish whether that targeted control succeeded.

This result would support concept drift, a distinct governance need illustrated by: A prediction model's learned relationship degrades after policy changes although the input-value distribution appears stable. For the reported input data drift issue at a global platform operator in Berlin, the relevant corrective action is: Monitor production input distributions and investigate meaningful shifts relative to approved baselines. The offered observation does not establish whether that targeted control succeeded.

This response relates instead to data dependency and drift, for which an example concern is: A prediction service trained on urban customers is introduced into rural locations with very different input distributions but no new validation. It could be useful in that different situation, but it would not directly address the autonomous agent boundaries deficiency reported at a large multibranch organization in Oslo. The targeted acceptance criterion here is: Tests show that unauthorized actions are blocked and high-impact steps require accountable approval.

This response relates instead to algorithmic unfairness, for which an example concern is: An AI screening tool achieves high overall accuracy while a protected demographic group has substantially worse false-negative rates. It could be useful in that different situation, but it would not directly address the autonomous agent boundaries deficiency reported at a large multibranch organization in Oslo. The targeted acceptance criterion here is: Tests show that unauthorized actions are blocked and high-impact steps require accountable approval.

This response relates instead to opaque decision impacts, for which an example concern is: A public-facing model rejects applications without any practical way for affected people to understand or challenge consequential outcomes. It could be useful in that different situation, but it would not directly address the autonomous agent boundaries deficiency reported at a large multibranch organization in Oslo. The targeted acceptance criterion here is: Tests show that unauthorized actions are blocked and high-impact steps require accountable approval.

This result would support safety versus raw accuracy, a distinct governance need illustrated by: An industrial anomaly detector improves average accuracy but produces rare unsafe false negatives in a safety-critical process. For the reported autonomous agent boundaries issue at a large multibranch organization in Oslo, the relevant corrective action is: Restrict tool authority, require approval for high-impact actions, and log consequential agent decisions. The offered observation does not establish whether that targeted control succeeded.

This result would support algorithmic unfairness, a distinct governance need illustrated by: An AI screening tool achieves high overall accuracy while a protected demographic group has substantially worse false-negative rates. For the reported autonomous agent boundaries issue at a large multibranch organization in Oslo, the relevant corrective action is: Restrict tool authority, require approval for high-impact actions, and log consequential agent decisions. The offered observation does not establish whether that targeted control succeeded.

This result would support probabilistic output and review, a distinct governance need illustrated by: An executive assumes a generative classifier will return identical conclusions on every run and removes human checks for unusual outputs. For the reported autonomous agent boundaries issue at a large multibranch organization in Oslo, the relevant corrective action is: Restrict tool authority, require approval for high-impact actions, and log consequential agent decisions. The offered observation does not establish whether that targeted control succeeded.