A transportation company is rolling out an AI system to manage traffic signals across a city. To make sure the system is socially responsible, the governance team analyzes and prioritizes different groups, from city council members with substantial decision-making authority to commuters directly affected by the system's outputs.
Which structured analytical method is the company applying to systematically identify, categorize, and prioritize these groups as part of responsible AI governance?

• A. Risk Profiling
• B. Impact Assessment
• C. Decision Matrix
• D. Stakeholder Mapping

An AI-powered discussion assistant is typically well behaved when answering individual prompts, but incident analysis shows that some harmful or inappropriate outputs arise only when a response is interpreted alongside earlier exchanges. Since existing keyword-based controls assess isolated messages, they either miss these nuanced situations or needlessly block legitimate conversations. A more precise filtering method is required-one that assesses usage patterns across interactions instead of considering each input independently.
Which content-filtering technique should be implemented to address this challenge?

• A. Natural Language Classification Models
• B. Human Review Flags
• C. Pattern Matching Systems
• D. Context-Aware Filters

A healthcare consortium has created a shared AI system to predict patient deterioration across 25 hospitals.
Each hospital has distinct patient populations, electronic health record systems, and clinical workflows. An extensive validation study found concerning results: the model performs excellently (AUC 0.92) in hospitals whose data was used for training, but performs substantially worse (AUC 0.74-0.81) in hospitals with different patient demographics and EHR systems. In addition, the model performs less well for certain ethnic- minority groups and older patients at every site. The validation team also found that clinicians cannot sufficiently interpret the model's predictions, resulting in low trust and inconsistent use. The consortium's clinical safety board must determine how to proceed with deployment in light of these validation findings while balancing patient safety, clinical utility, fairness, and the substantial investment already made in the system.
What validation and deployment strategy would most appropriately address the identified performance, fairness, and interpretability issues while furthering the consortium's patient-safety goals?

• A. Abandon the shared model approach entirely and require each hospital to develop independent AI systems customized to their specific populations
• B. Implement staged validation and deployment: suspend new deployments, conduct transfer learning validation and recalibration
• C. Deploy the system immediately to all hospitals since the average performance is still above the clinical threshold acceptable range
• D. Deploy the system only in the high-performing hospitals and exclude populations where the model shows reduced performance to maintain metrics

Global Health Solutions uses an external AI vendor in a different jurisdiction to support diagnostic-imaging services. As part of regulatory oversight, the organization must ensure that patient data handled by the vendor complies with legal requirements governing the transfer, storage, and access of sensitive health information across national borders.
Which compliance verification is most directly necessary to avoid violations involving the cross-border handling of patient data?

• A. International Vendor Privacy Policy Review
• B. Jurisdiction-Specific Data Retention Alignment
• C. Legal Data Movement and Residency Compliance
• D. Cross-Border Data Transfer Authorization Controls

Michael Turner, Vice President of Enterprise Technology at a global insurance organization, is leading the rollout of an AI-based customer-verification and fraud-analytics platform across multiple regions. To enable rapid scaling and operational resilience, the organization works with an external firm that provides on-demand computing capacity, managed data storage, embedded security controls, and a standardized environment for deploying and operating machine-learning workloads. Internal teams continue to be responsible for developing application logic, governing AI models, and ensuring regulatory and policy compliance. The external firm's responsibility is limited to operating, securing, and maintaining the underlying technical infrastructure that allows these AI systems to run reliably.
Which third-party role in the AI ecosystem best characterizes this external firm's function?

• A. Model Providers
• B. AI-as-a-Service (API) Providers
• C. Data Vendors
• D. Cloud Providers