IAPP Updated AIGP Exam Questions and Answers by ray

The correct answer isC. ISO/IEC 22989 and 42001 focus onterminology, risk, and management systems, butdo not specifically address procurement-related concerns with third-party vendors.

From the AIGP Body of Knowledge – Standards Section:

“ISO/IEC 22989 defines terminology and foundational concepts. ISO/IEC 42001 provides a management system standard for AI. They are not procurement-focused documents.”

Also confirmed in the AI Governance in Practice Report 2025:

“These standards help establish common language and risk governance procedures. Procurement governance typically falls under separate frameworks or sector-specific guidance.”

Thus,procurement governance (Option C)is not a central use case for these standards.

===========

The correct answer is C because differential privacy is specifically designed to ensure that the inclusion or exclusion of any single data point does not significantly affect the output of a model. This provides strong mathematical guarantees that individual training data cannot be reverse-engineered or identified from model outputs. Differential privacy works by introducing controlled noise into the data or model outputs, thereby protecting individual-level information while preserving overall statistical patterns. In AI governance, it is widely recognized as a key privacy-enhancing technology for mitigating risks such as data leakage, membership inference attacks, and re-identification. Other options, such as homomorphic encryption, focus on secure computation, while data sharding and compartmentalization address data management but do not provide formal privacy guarantees at the model output level.

AI ' s resource-intensive computing demands pose significant environmental risks. High-performance computing required for training and deploying AI models often leads to substantial energy consumption, which can result in increased carbon emissions and other environmental impacts. This is particularly relevant given the growing concern over climate change and the environmental footprint of technology. Organizations need to consider these environmental risks when developing AI systems, potentially exploring more energy-efficient methods and renewable energy sources to mitigate the environmental impact.

The correct answer is B because continuous monitoring is a core component of AI governance that ensures systems remain effective, reliable, and aligned with their intended objectives over time. AI systems can degrade due to data drift, model drift, or changing real-world conditions, making ongoing performance tracking essential. Monitoring allows organizations to detect anomalies, biases, or performance issues and take corrective actions such as retraining or recalibration. Governance frameworks emphasize post-deployment oversight to ensure systems continue to operate safely and within acceptable risk thresholds. Option A incorrectly suggests fully autonomous evolution without oversight, which contradicts governance principles. Options C and D address specific operational concerns but do not capture the primary purpose of continuous monitoring, which is maintaining performance, accountability, and alignment with defined goals.