A national digital-learning board implements an AI-driven recommendation engine to personalise course pathways for students across public institutions. Following the first academic cycle, education auditors find that the system automatically redirects students to lower-complexity learning tracks solely on the basis of early performance indicators. Students and instructors are not told about these automated pathway changes, and learners have no way to state preferences, challenge the outcomes, or opt for advanced coursework.
Several students say they feel restricted by decisions in which they had no involvement, raising concerns about the system's effect on learner autonomy and developmental opportunities. As the Chief AI Governance Officer, identify the ethical principle that has been compromised to guide the required policy and design corrections.
Which ethical principle has been violated in this scenario?

• A. Transparency
• B. Human-Centric Values
• C. Accountability
• D. Fairness

As an AI-powered fraud-detection engine nears production deployment, assurance teams verify that it operates correctly under normal transaction patterns. However, risk discussions identify a subtler threat:
malicious actors may deliberately craft transaction inputs that cause the model to approve fraudulent activity without activating conventional failure indicators. This risk would not appear through routine functional or access checks and could directly erode trust in real-time decisioning during live operations.
As the AI Security Assurance Lead, which type of security testing should be used to intentionally assess the system's resistance to this manipulation before release?

• A. Penetration Testing
• B. Adversarial Testing
• C. Vulnerability Scanning
• D. Access Control Testing

During a cross-functional risk workshop for a new autonomous delivery drone, representatives from the legal, cybersecurity, and data science departments are assessing how a potential "model drift" event could propagate through the system and affect user safety and business continuity.
Which step of the risk assessment lifecycle entails evaluating the probability, severity, and propagation effect of identified risks?

• A. Establishing Risk Thresholds
• B. Risk Prioritization
• C. Risk Identification
• D. Analyzing Risks

Following a recent software update, OmniHealth's diagnostic AI has begun flagging benign skin conditions as malignant at an unprecedented rate. As the CDO, you are leading the response. Your team has successfully identified the anomaly. You are now in the containment phase and must stabilize the system without taking it fully offline, since it is critical for ongoing patient triage.
Which short-term containment action should be approved to restrict system throughput and prevent an overload of erroneous predictions while keeping the service partially available?

• A. Implement rate limiting
• B. Perform a full system shutdown and disconnect all network access
• C. Deploy a shadow model to compare predictions in the background
• D. Retrain the model immediately using the latest clinical dataset

An organization in a regulated sector has adopted AI across multiple functions, with each team adhering to approved internal procedures for model development and deployment. During an external review, reviewers observe that required activities-such as approvals, validations, updates, and reviews-have taken place at different times. However, they struggle to establish how these activities relate to one another throughout the full lifespan of each AI system. Determining how earlier decisions affected later outcomes requires manual work, cross-team coordination, and interpretation of disconnected records.
Which governance challenge best explains the organization's difficulty demonstrating dependable, end-to-end oversight of its AI systems during formal reviews?

• A. Insufficient monitoring of deployed model behavior
• B. Inconsistent assignment of governance ownership
• C. Limited enforcement of ethical design principles
• D. Fragmented execution of lifecycle governance activities