IAPP AIGP Practice Exam Questions

IAPP AIGP Sample Question Answers

Question # 1

CASE STUDYPlease use the following to answer the next question:You have recently assumed the role of AI Governance leader for a California-basedmedical technology company. The organization primarily serves hospitals and has recentlyexpanded to include walk-in clinics located within local pharmacies.The company's core business focuses on diagnostic assistance powered by a largelanguage model LLM and back-office process optimization using Agentic AI, includingchatbots, medical record request handling, scheduling and billing.In preparation for its next round of funding, the board has asked you to prepare an AI Riskreport to demonstrate to investors how the company is addressing AI-related risks. Inpreparing the report you learn that last year the company generated 30 million dollars ingross revenue across the US, EU, India, and South Korea and that vendors are engagedfor various activities, including model testing and providing third-party AI solutions forchatbots.Which of the following best exemplifies human oversight capabilities you should enableunder the relevant AI laws?

A. The tool requires a medical doctor to approve a diagnosis before the diagnosis isentered into the patient's medical record.
B. The tool manual requires that all physicians are required to undergo specific training regarding how to interpret the AI's output, and understand its limitations. 
C. The agentic tool that helps schedule appointments and refill prescriptions leverages Retrieval-Augmented Generation RAG to confirm there are no medication contraindications before refilling.
D. The company has established an AI governance team within each of its departments who are specifically required to evaluate the performance metrics, including anomalies, to ensure the AI tool is operating correctly.

Show Answer

Question # 2

After completing model testing and validation, which of the following is the most importantstep that an organization takes prior to deploying the model into production?

A. Perform a readiness assessment. 
B. Define a model-validation methodology. 
C. Document maintenance teams and processes.
D. Identify known edge cases to monitor post-deployment. 

Show Answer

Question # 3

Scenario:A distributor operating in the EU is responsible for selling imported high-risk AI systems tobusinesses. The distributor wants to ensure they fulfill all applicable obligations under theEU AI Act.All of the following are obligations of a distributor of high-risk AI systems under the EU AIAct EXCEPT?

A. Corrective actions 
B. Verification of CE marking 
C. Registration in EU Database 
D. Communication with national authorities 

Show Answer

Question # 4

Training data is best defined as a subset of data that is used to? 

A. Enable a model to detect and learn patterns. 
B. Fine-tune a model to improve accuracy and prevent overfitting. 
C. Detect the initial sources of biases to mitigate prior to deployment. 
D. Resemble the structure and statistical properties of production data. 

Show Answer

Question # 5

In 2025, which U.S. agency ordered companies to provide information about the safety oftheir AI companion chatbots?

A. The Central Intelligence Agency CIA 
B. The Department of Justice DOJ 
C. The Federal Trade Commission FTC 
D. The Federal Communications Commission FCC 

Show Answer

Question # 6

You are the chief privacy officer of a medical research company that would like to collectand use sensitive data about cancer patients, such as their names, addresses, race andethnic origin, medical histories, insurance claims, pharmaceutical prescriptions, eating anddrinking habits and physical activity.The company will use this sensitive data to build an Al algorithm that will spot commonattributes that will help predict if seemingly healthy people are more likely to get cancer.However, the company is unable to obtain consent from enough patients to sufficientlycollect the minimum data to train its model.Which of the following solutions would most efficiently balance privacy concerns with thelack of available data during the testing phase?

A. Deploy the current model and recalibrate it over time with more data. 
B. Extend the model to multi-modal ingestion with text and images. 
C. Utilize synthetic data to offset the lack of patient data. 
D. Refocus the algorithm to patients without cancer. 

Show Answer

Question # 7

The framework set forth in the White House Blueprint for an Al Bill of Rights addresses allof the following EXCEPT?

A. Human alternatives, consideration and fallback. 
B. High-risk mitigation standards. 
C. Safe and effective systems. 
D. Data privacy. 

Show Answer

Question # 8

Scenario:A financial services company is planning a new AI project to assess creditworthiness. TheAI team is mapping out what tasks should be completed during theplanning phaseof the AIlifecycle.The planning phase of the AI lifecycle includes all of the following EXCEPT:

A. Definition of underlying assumptions 
B. Approach to governance 
C. Choice of the architecture 
D. Context in which the model will operate 

Show Answer

Question # 9

CASE STUDYPlease use the following answer the next question:A mid-size US healthcare network has decided to develop an Al solution to detect a type ofcancer that is most likely arise in adults. Specifically, the healthcare network intends tocreate a recognition algorithm that will perform an initial review of all imaging and thenroute records a radiologist for secondary review pursuant agreed-upon criteria (e.g., aconfidence score below a threshold).To date, the healthcare network has taken the following steps: defined its Al ethicalprinciples: conducted discovery to identify the intended uses and success criteria for thesystem: established an Al governance committee; assembled a broad, crossfunctionalteam with clear roles and responsibilities; and created policies and procedures to documentstandards, workflows, timelines and risk thresholds during the project.The healthcare network intends to retain a cloud provider to host the solution and aconsulting firm to help develop the algorithm using the healthcare network's existing dataand de-identified data that is licensed from a large US clinical research partner.In the design phase, what is the most important step for the healthcare network to takewhen mapping its existing data to the clinical research partner data?

A. Apply privacy-enhancing technologies to the data. 
B. Identify fits and gaps in the combined data. 
C. Ensure the data is labeled and formatted. 
D. Evaluate the country of origin of the data. 

Show Answer

Question # 10

CASE STUDYPlease use the following answer the next question:A local police department in the United States procured an Al system to monitor andanalyze social media feeds, online marketplaces and other sources of public information todetect evidence of illegal activities (e.g., sale of drugs or stolen goods). The Al systemworks by surveilling the public sites in order to identify individuals that are likely to havecommitted a crime. It cross-references the individuals against data maintained by lawenforcement and then assigns a percentage score of the likelihood of criminal activitybased on certain factors like previous criminal history, location, time, race and gender.The police department retained a third-party consultant assist in the procurement process,specifically to evaluate two finalists. Each of the vendors provided information about theirsystem's accuracy rates, the diversity of their training data and how their system works.The consultant determined that the first vendor’s system has a higher accuracy rate andbased on this information, recommended this vendor to the police department.The police department chose the first vendor and implemented its Al system. As part of theimplementation, the department and consultant created a usage policy for the system,which includes training police officers on how the system works and how to incorporate itinto their investigation process.The police department has now been using the Al system for a year. An internal review hasfound that every time the system scored a likelihood of criminal activity at or above 90%,the police investigation subsequently confirmed that the individual had, in fact, committed acrime. Based on these results, the police department wants to forego investigations forcases where the Al system gives a score of at least 90% and proceed directly with anarrest.The best human oversight mechanism for the police department to implement is that apolice officer should?

A. Explain to the accused how the Al system works. 
B. Confirm the Al recommendation prior to sentencing. 
C. Ensure an accused is given notice that the Al system was used. 
D. Consider the Al recommendation as part of the criminal investigation. 

Show Answer