D3 · AI Governance and Responsible AI Leadership

This domain carries 24% of the exam — roughly 21 of 85 items on our mock. It tests whether you can make responsible AI a working part of a business decision rather than a legal afterthought. The recurring judgement is not “is this ethical?” in the abstract; it is which dimension is at stake, what control it demands, who owns the decision, and what you trade away when the business objective and the principle pull in opposite directions. AWS is explicit that this exam does not assess AWS services knowledge, so you are never asked to configure a guardrail or write an access policy — you are asked to decide when a guardrail is required, what oversight the use case demands, and how to tier controls to risk. This page connects to the course overview and to the frameworks appendix, which carries the reference detail on the dimensions, the shared responsibility split and the external standards.

What you need to know

Responsible AI is a set of dimensions you apply to a concrete scenario, not a slogan. AWS publishes eight dimensions; the exam guide names a six-item subset, and you should know both. The hardest skill in the domain is navigating trade-offs when an objective (speed, personalisation, automation rate, cost) conflicts with a principle (explainability, privacy, fairness, human review) — there is rarely a free answer, so you choose the option that manages the risk proportionally and keeps accountability with a named owner. Governance by design means integrating these practices during planning, because retrofitting them after launch is far more expensive and often impossible. You must know when human oversight is mandatory, how to classify use cases into risk tiers and attach a control set to each tier, and how to direct mitigation of the enterprise risks — bias across the lifecycle, harmful content, intellectual property, and reliability failures such as hallucination and drift.

Learning objectives

By the end of this page you should be able to:

Apply the eight AWS responsible AI dimensions to a business scenario, and recognise the exam guide’s six-item subset (Task 3.1).
Navigate a trade-off where a business objective conflicts with a responsible AI principle, using a structured method (Task 3.1).
Place each responsible AI practice at the right point in project planning and explain the cost of retrofitting (Task 3.1).
Determine when human oversight is mandatory and name the safeguards that support it (Task 3.1).
Establish a governance structure with cross-functional representation, decision rights and accountability, and tell enabling governance from theatre (Task 3.2).
Identify regulatory-compliance risk for AI-using business processes (Task 3.2).
Specify access-control and data-security expectations at a governance level, and place them correctly on the AWS shared responsibility model for AI workloads (Task 3.2).
Apply a risk-classification framework to tier use cases and attach controls (Task 3.2).
Direct mitigation of production risk, bias drift, harmful-content and IP risk, and reliability risk (Task 3.3).

Task statements covered

Official skill	Where it is taught
3.1.1 Apply responsible AI principles and dimensions to business scenarios	3.1, 3.2
3.1.2 Navigate trade-offs when objectives conflict with principles	3.3
3.1.3 Integrate responsible AI into project planning (governance by design)	3.4
3.1.4 Recognise when human oversight is required; identify safeguards	3.5
3.2.1 Establish governance structures with cross-functional representation and accountability	3.6
3.2.2 Identify and address regulatory-compliance risks	3.7
3.2.3 Identify access controls and data-security measures	3.8
3.2.4 Apply AI risk-classification frameworks across the lifecycle	3.9, Decision framework
3.3.1 Identify the need for risk controls and monitoring in production	3.10
3.3.2 Recognise bias at multiple lifecycle stages; monitor for bias drift	3.11
3.3.3 Manage harmful-content and intellectual-property risk	3.12
3.3.4 Identify and mitigate reliability risk (hallucination, degradation, drift)	3.13

3.1 The responsible AI dimensions

AWS publishes eight core responsible AI dimensions. Learn all eight, because a scenario can turn on any of them; also note that the exam guide’s own list is a six-item subset (fairness, explainability, privacy, safety, transparency, robustness) — same idea, fewer names.

Dimension	The question it answers	Business signal it protects
Fairness	Are outcomes equitable across groups?	Discrimination, legal exposure, reputational harm
Explainability	Can we say why the system decided this?	Contestability, audit, customer trust
Privacy and security	Is personal data protected and access controlled?	Data-protection law, breach cost
Safety	Can the system cause harm, and is that prevented?	Physical, financial or psychological harm
Controllability	Can a human steer, override or stop it?	Ability to intervene when it goes wrong
Veracity and robustness	Is output truthful and stable under real conditions?	Hallucination, drift, adversarial inputs
Governance	Are roles, policies and oversight defined?	Accountability, repeatability, defensibility
Transparency	Do stakeholders know AI is in use and its limits?	Informed consent, disclosure obligations

The exam does not ask you to configure any of these — it asks you to name the dimension a scenario threatens and pick the control that protects it. A hiring model that scores women lower threatens fairness; a loan decision the applicant cannot contest threatens explainability; a chatbot that invents policy threatens veracity.

Exam signal

When a stem gives a scenario and asks “which responsible AI principle is MOST at risk”, it is testing dimension recognition. Match the harm described to the dimension: unequal outcomes → fairness; “cannot explain the decision” → explainability; “can a human stop it” → controllability; “customers do not know it is AI” → transparency.

3.2 Applying the dimensions to real scenarios

The same dimension list produces very different priorities depending on the business context. This is the map the exam expects you to carry.

Scenario	Dimensions most at stake	Why
Hiring / résumé screening	Fairness, explainability, transparency	Protected characteristics; candidates can contest; disclosure often required
Lending / credit	Fairness, explainability, governance	Regulated; adverse-action reasons must be explainable
Dynamic pricing	Fairness, transparency	Discriminatory pricing risk; disclosure and anti-gouging rules
Clinical triage	Safety, controllability, veracity, human oversight	Life-affecting; a clinician must be able to override
Content moderation	Fairness, safety, transparency, robustness	Over- and under-blocking both harm; appeal path needed
Customer service assistant	Veracity, transparency, controllability	Hallucinated commitments; users should know it is AI; escalation to a human

3.3 Navigating trade-offs

This is the hardest skill in the domain, and the one the exam probes most. Business objectives and responsible AI principles genuinely conflict. The wrong answer sacrifices the principle for the objective (or vice versa) without managing the risk. The right answer names both sides, sizes the harm, and finds the proportional control.

A structured method for any trade-off:

Name both sides — the business objective and the principle it strains.
Size the harm — who is affected, how badly, how reversibly, how many?
Ask if the conflict is real or lazy — often a small control removes the conflict entirely.
Choose the proportional control — the lightest measure that keeps residual risk acceptable.
Assign an owner and a review date — a trade-off decision is not permanent.

Conflict	Tempting shortcut	Proportional resolution
Speed vs explainability	Ship the black-box model because it is faster	Use it for low-stakes decisions; require an explainable path (reason codes, human review) for consequential ones
Personalisation vs privacy	Collect everything to personalise more	Minimise data to what the outcome needs; personalise on consented, in-region data only
Automation rate vs fairness	Auto-approve to hit a throughput target	Cap the automation rate where error is unequal across groups; route edge and adverse cases to humans
Cost vs human review	Drop human review to cut cost	Keep review where decisions are irreversible or regulated; sample-review the rest rather than removing it

Worked trade-off — automation rate vs fairness. A claims team wants to auto-approve 80% of insurance claims to cut handling time. Testing shows the model’s error rate is 4% for the majority group but 11% for a minority group. Auto-approving uniformly would push a materially higher share of wrong decisions onto one group — a fairness failure with legal exposure. The proportional resolution is not “abandon automation” and not “automate everything”; it is to auto-approve where confidence is high and error is equitable, hold the segment with the 11% error rate for human review until the model improves, and monitor the split monthly. You keep most of the speed benefit while removing the discriminatory harm — and you have a named owner and a review date.

Exam signal

Trade-off stems use pairs of words like “faster but less explainable”, “more personalised but more data”, “higher automation but”. The wrong answers pick one pole absolutely (“always automate”, “never use the model”). The right answer is conditional and proportional: automate the safe segment, review the risky one.

3.4 Governance by design

Responsible AI practices cost far less when they are planning inputs than when they are bolted on after launch. Governance by design means each practice enters the project at the point where it is cheapest to satisfy.

Project phase	Responsible AI practice that belongs here	Cost if deferred
Problem framing	Decide if AI is even appropriate; identify affected groups	Whole build may be wrong; rework
Data sourcing	Provenance, consent, representativeness, minimisation	Retraining, legal exposure, re-collection
Design	Explainability need, human-oversight mode, disclosure plan	Re-architecture to add a human loop
Build / evaluation	Bias testing, grounding checks, red-teaming	Late discovery, launch slip
Launch	Approval against risk tier, monitoring, escalation path	Ungoverned production incident
Operation	Drift and bias-drift monitoring, periodic review	Silent degradation, unnoticed harm

The exam signal is the phrase “before we build” / “at what stage”. A correct answer places bias testing, oversight design and disclosure in planning; a distractor treats responsible AI as “a compliance review right before launch”.

3.5 Human oversight and safeguards

Human oversight is mandatory — not merely advisable — when a decision is consequential, irreversible, regulated, or touches rights and safety. The business skill is knowing which oversight mode fits, and which safeguards support it.

Oversight mode	When it applies	Example
Human-in-the-loop	High stakes; a human approves before the action	Loan denial, clinical triage, firing
Human-on-the-loop	Medium stakes; a human monitors and can intervene	Content moderation queue, fraud flags
Human-in-command	The human sets policy and can shut the system down	Any autonomous process at scale

Safeguards a business leader should require by name:

Guardrails — content filters, denied topics, and PII redaction on inputs and outputs.
Contextual grounding checks — verify the answer against a trusted source to catch hallucination.
Hallucination detection — flag low-confidence or ungrounded output for review.
Escalation criteria — the explicit conditions under which the system hands off to a human (low confidence, sensitive topic, high value, repeated failure).
Approval thresholds — a value or risk level above which a human must sign off.

Exam signal

“Irreversible”, “regulated”, “affects a person’s rights”, “safety-critical”, “adverse decision” → human-in-the-loop is required and any option removing it is wrong regardless of accuracy claims. “Monitor and intervene” language points to human-on-the-loop.

3.6 Governance structures: enabling versus theatre

A governance structure names who decides, who is accountable, and how exceptions are handled. The distinction the exam rewards is governance that enables safe adoption versus governance that performs caution — a board that reviews every request produces delay, drives shadow AI, and does not make anything safer.

Element	Question it answers	Good answer
Cross-functional representation	Who is at the table?	Business, legal, security, data, risk, and a line-of-business voice
Decision rights	Who approves at each risk tier?	Low: team lead; medium: function + risk; high: review board
Accountability	Who owns AI risk overall?	A named executive sponsor
Review board	Where are non-standard cases judged?	A small cross-functional board on a cadence
Exception path	How do we say yes to a hard case safely?	Time-boxed, conditioned, logged, revisited

The load-bearing idea is tiering: most decisions never reach the board. A model that routes everything to a committee is theatre; one that reserves the board for genuine risk and lets low-risk use proceed with light controls is what “enabling governance” means.

Exam signal

“A committee reviews every AI request”, “all use cases require board approval” are theatre distractors. Correct answers tier decision rights and give the board only the high-risk cases, plus a real exception path.

3.7 Regulatory-compliance risk

You are not asked to cite article numbers. You are asked to recognise when a business process using AI creates regulatory exposure and route it to the right control.

Trigger in the scenario	Likely regime	What governance must do
Personal data, profiling, cross-border transfer	Data-protection law	Legal sign-off, residency, minimisation, DPIA
Credit, insurance, employment decisions	Sector + anti-discrimination law	Explainability, adverse-action reasons, bias testing
Health, safety-critical	Sector regulation	Human-in-the-loop, validation, records
High-risk automated decisions on people	Risk-tiered AI regulation (e.g. EU AI Act)	Classification, documentation, oversight, disclosure
Any consequential AI system	Emerging AI-management standards (ISO/IEC 42001)	A management system with defined controls

The exam’s phrasing is “which of these raises a compliance concern” or “what should be reviewed before deployment”. The correct answer routes to legal/compliance review as a planning input and attaches controls to the risk, not “proceed and address complaints later”.

3.8 Access control, data security, and shared responsibility

At a governance level you specify expectations, not implementations: least-privilege access, data classification gates, audit logging, and no-training terms for confidential data. The exam frames this through the AWS shared responsibility model for AI workloads.

Responsibility	Who owns it	Examples
Security of the cloud	AWS	Physical infrastructure, managed-service operation, availability of the platform
Security in the cloud	The customer	Their data, who can access it, whether the use case is appropriate, human oversight, compliance of the business process

The line moves for managed services, but it never removes the customer’s accountability for what the system is used for and whether its output is fit for purpose. That last clause is the exam trap: “the provider is responsible for the model, so accuracy is their problem” is wrong — fitness for purpose and oversight stay with the customer.

Exam signal

“Whose responsibility” stems: infrastructure and platform operation → AWS; use-case appropriateness, data, access, oversight, output fitness → the customer. Any option that offloads use-case accountability to AWS is wrong.

3.9 AI risk-classification frameworks

You cannot govern every use case the same way. A risk-classification framework tiers use cases and attaches a proportional control set to each tier. The exam wants you to apply one, not recite regulation.

External scaffolding worth knowing at a business level:

EU AI Act risk tiers — unacceptable / high / limited / minimal, with obligations rising by tier.
NIST AI Risk Management Framework — four functions: Govern, Map, Measure, Manage.
ISO/IEC 42001 — a certifiable AI management-system standard that provides the scaffolding for defining, operating and improving controls; ISO/IEC 23053 frames AI systems built with ML.

The business move: classify each use case into a tier, then read off the control set from your matrix (see the Decision framework below). This is how governance stays proportional — a low-risk internal summariser and a high-risk lending model do not get the same paperwork.

3.10 Production risk controls and monitoring

A model that passed evaluation can fail in production. Governance requires controls that run continuously, not a one-time launch check.

Control	What it catches	Cadence
Output monitoring	Quality drop, off-policy responses	Continuous / sampled
Drift monitoring	Input or performance drift over time	Continuous with alerts
Bias-drift monitoring	Fairness degrading as data shifts	Periodic, per protected group
Incident + escalation	A harm actually occurring	On trigger
Periodic review	Whether the use case is still justified	Quarterly or on change

The exam signal is “the pilot worked, so we deployed it and moved on” — a distractor. Production is where ongoing monitoring earns its keep; a correct answer keeps monitoring and an escalation path live after launch.

3.11 Bias across the lifecycle and bias drift

Bias is not a single event at training time. It can enter at multiple stages, and it can drift after launch as the world changes.

Stage	How bias enters	Business control
Problem framing	The wrong objective encodes a bias	Review the objective with affected groups
Data collection	Unrepresentative or historical data	Representativeness checks, provenance
Labelling	Annotator bias	Guidelines, multiple annotators
Training	Model amplifies patterns in data	Bias testing across groups
Deployment	Applied to a different population	Pre-deployment validation on the target population
Operation (drift)	Population or behaviour shifts over time	Bias-drift monitoring per group

Bias drift is the exam’s favourite here: a model fair at launch can become unfair as inputs change, so monitoring must be ongoing and segmented by protected group — a one-time fairness sign-off is not enough.

3.12 Harmful content and intellectual-property risk

Two risk families a business leader must direct, especially with generative systems.

Harmful content. Customer-facing generative output can produce offensive, unsafe or off-brand text. Governance requires content review for external material, guardrails on inputs and outputs, and a human gate on anything published in the organisation’s name.

Intellectual property. Generative AI raises questions a leader must ask a vendor before signing:

IP question to ask a vendor	Why it matters
What is the training-data provenance?	Unlicensed data creates infringement exposure
Who owns the output, and can we use it commercially?	Ambiguous output ownership blocks reuse
Do you offer IP indemnity for outputs, and with what limits?	Shifts or shares infringement risk
Is our input used to train your models?	Confidential data leakage into a shared model
What customer-facing content review do we owe?	Publishing unreviewed output is the organisation’s liability

The trap: “the vendor’s model, so IP is the vendor’s problem”. Indemnity may help, but publishing infringing or harmful output in your own name is your reputational and legal exposure — review stays with the customer.

3.13 Reliability risk

Reliability failures are the day-to-day risks of AI in production.

Failure	Signature	Mitigation the leader should require
Hallucination	Fluent, confident, ungrounded output	Contextual grounding checks, human review on high stakes
Data-quality degradation	Inputs get noisier or stale	Data-quality monitoring, refresh policy
Model drift	Accuracy falls as the world changes	Drift monitoring, scheduled re-evaluation

The business framing: reliability is not a one-time property. A system that was accurate at launch will degrade without monitoring. The correct answers keep grounding, monitoring and human review proportional to stakes; distractors trust a launch-day accuracy figure indefinitely.

Decision framework — the risk-tier to control-set matrix

Classify every use case into a tier, then read off the required controls. This is the instrument to carry into the exam and into work tomorrow.

Tier	Example	Required approval	Human oversight	Monitoring cadence	Documentation	Escalation path
T1 · Minimal	Internal draft summariser, brainstorming	Team lead	Optional; author reviews	Sampled, periodic	Use-case note	Team owner
T2 · Limited	Internal knowledge assistant, non-customer content	Function + risk sign-off	Human-on-the-loop	Monthly + alerts	Use-case record, data class	Function lead
T3 · High	Customer-facing decisions, pricing, moderation	Review board	Human-in-the-loop on adverse/edge cases	Continuous + bias drift	Impact assessment, test results	Review board + owner
T4 · Critical	Lending, hiring, clinical, safety	Review board + legal	Human-in-the-loop, human-in-command	Continuous + per-group + audit	Full impact + compliance record	Executive sponsor + regulator path

Worked application. A retailer proposes an AI assistant that answers product questions and can issue refunds up to a value. Split it: the answer questions capability is T2 (internal-quality, low harm — grounding checks and monthly monitoring). The issue refunds capability is T3 because it moves money and faces customers: refunds above a threshold need human approval, continuous monitoring, and an escalation path. One “product” spans two tiers; the framework forces you to control each capability at its own risk level rather than under-governing the refund path because the chatbot as a whole “felt low risk”.

Common mistakes

Mistake	Why it happens	What to do instead
Treating responsible AI as a legal review just before launch	It feels like a compliance checkbox	Integrate it in planning — governance by design
Sacrificing the principle to hit the business metric	The objective is measured; the harm is not	Use the trade-off method; pick a proportional, conditional control
Routing every request to a review board	It feels safe and thorough	Tier decision rights; reserve the board for high risk
Assuming AWS is responsible for output accuracy	The provider runs the model	Fitness for purpose and oversight stay with the customer
One-time fairness sign-off at launch	Bias is treated as a training-time event	Monitor bias drift per group in production
Trusting a launch-day accuracy figure forever	The pilot worked, so it must keep working	Monitor drift and degradation continuously
“The vendor’s model, so IP is their problem”	Indemnity feels like full cover	Ask provenance, ownership and indemnity questions; review customer-facing output
Removing human review to cut cost	Review is a visible cost; the incident is not	Keep review where irreversible or regulated; sample-review the rest
Same controls for every use case	Uniformity feels fair and simple	Tier use cases; attach controls proportional to risk
Publishing generative output unreviewed	It is fast and reads well	Human gate on anything in the organisation’s name
Confusing controllability with accuracy	Both sound like “the system works”	Controllability is can a human stop it, not is it right
Naming “AI ethics” with no owner or path	A document feels like governance	Assign owners, decision rights and an exception path

Scenario walkthrough — a health insurer automates pre-authorisation

Scenario. A health insurer wants an AI system to pre-authorise routine medical procedures automatically, cutting a five-day manual process to minutes. The vendor demonstrates 94% agreement with human reviewers on a test set. The COO wants to auto-approve and auto-deny to capture the full efficiency gain. Legal is nervous. The data-science lead says the model is “explainable enough”. A pilot on one region showed the denial error rate was 3% overall but 9% for one demographic segment. The proposed launch plan has a single sign-off meeting and no post-launch monitoring beyond uptime.

Expert reasoning trace.

Classify the use case. This affects people’s access to healthcare, it is a regulated domain, and a wrong denial is consequential and hard to reverse. This is Tier 4 · Critical. That alone rules out “single sign-off, no monitoring”.
Split the capability by harm. Auto-approval of routine, low-risk procedures is far less harmful than auto-denial. A denial removes access and demands explainability and contestability. The proportional design auto-approves the clear cases and routes all denials to a human — human-in-the-loop on the adverse decision.
Attack the fairness signal. A 9% error rate for one segment against 3% overall is a fairness failure with clear regulatory exposure. Uniform auto-denial would concentrate wrong denials on that group. This is not “the model is 94% accurate, ship it”; the aggregate hides the disparity.
Test “explainable enough”. For a denial the applicant can contest, the system must produce a reason a human can defend. “Explainable enough” for an internal metric is not the same as explainable to a regulator or an appeal.
Place governance in the design, not at the end. The single sign-off meeting is governance theatre. Tier 4 needs review-board approval, legal sign-off, an impact assessment, continuous monitoring with per-group bias-drift tracking, and an escalation path.
Do the trade-off arithmetic. Suppose 100,000 pre-auths a year, 70% clearly approvable. Auto-approving that 70% captures most of the efficiency (70,000 fast decisions) with low harm. The remaining 30,000 — all denials and edge cases — go to humans. The insurer keeps roughly 70% of the speed gain while removing the discriminatory-denial risk entirely, versus a full-automation plan that captures 100% of the speed and inherits a regulatory and reputational crisis.

Exam-correct decision: classify as Tier 4; auto-approve only the clearly approvable low-risk segment; route all denials and the higher-error segment to human review; require explainable reason codes for denials; obtain review-board and legal sign-off as planning inputs; and run continuous monitoring with per-group bias-drift tracking. Not full automation on a 94% aggregate, not a single launch sign-off, not “explainable enough” for a contestable denial.

Exam traps in this domain

Trap	Why it is tempting	The discriminator
“94% accurate, so deploy for everything”	A high aggregate looks decisive	Aggregates hide per-group disparity; check the segment error and the stakes
“The provider owns the model, so accuracy is their responsibility”	Shared responsibility sounds like a full handoff	Fitness for purpose and oversight always stay with the customer
“Route every AI request to the review board”	It feels safe and rigorous	That is theatre; tier decision rights and reserve the board for high risk
“Add a responsible AI review right before launch”	Compliance-review habit	Governance by design; retrofitting costs far more
“The pilot passed, so ongoing monitoring is optional”	Launch success feels permanent	Drift and bias drift require continuous monitoring
“We have an AI ethics document, so we have governance”	A document looks like a control	Governance needs owners, decision rights and an exception path
“Automate fully to capture the whole efficiency gain”	The metric is throughput	Cap automation where error is unequal or the decision is adverse
“Indemnity means IP risk is covered”	The clause reads reassuring	Publishing infringing output in your name is still your exposure
“Explainable enough for our internal metric”	The team is satisfied	A contestable decision needs a reason a regulator/appeal accepts
“Lower human review to cut cost”	Review is a visible line item	Keep it where irreversible or regulated; the incident cost dwarfs it

Practice questions

Each item states how many responses to select. Attempt before revealing.

Q1 · A loan-decisioning model denies an application and the applicant asks why. The business cannot produce a reason. Which responsible AI dimension is MOST at risk? (Select one)

A. Controllability B. Explainability C. Robustness D. Privacy

Answer: B. An inability to say why a decision was made is an explainability failure, and in lending it is also a regulatory one (adverse-action reasons). Controllability (A) is about stopping or steering the system, not explaining it. Robustness (C) is about stability under real conditions. Privacy (D) concerns data handling, not the reasoning behind the decision.

Q2 · AWS publishes its core responsible AI dimensions. How many are there, and how does the exam guide's own list relate to them? (Select one)

A. Six dimensions; the guide lists all six. B. Eight dimensions; the exam guide names a six-item subset. C. Four dimensions matching the CAF transformation domains. D. Ten dimensions aligned to the NIST AI RMF.

Answer: B. AWS publishes eight dimensions (fairness, explainability, privacy and security, safety, controllability, veracity and robustness, governance, transparency); the exam guide names a six-item subset. Six (A) is the guide’s subset, not the full set. The CAF transformation domains (C) and the NIST functions (D) are different frameworks entirely.

Q3 · A claims team wants to auto-approve 80% of claims to cut handling time, but testing shows the model's error rate is 4% for the majority group and 11% for a minority group. What is the BEST course of action? (Select one)

A. Auto-approve all 80% uniformly; the average error is acceptable. B. Abandon automation entirely because it is unfair. C. Auto-approve where confidence is high and error is equitable, route the higher-error segment to human review, and monitor the split. D. Auto-approve only the minority group’s claims to compensate.

Answer: C. The proportional resolution captures most of the speed while removing the discriminatory harm and keeps a review date. Uniform auto-approval (A) concentrates wrong decisions on one group — a fairness failure. Abandoning automation (B) throws away the benefit unnecessarily. Reverse-discriminating (D) creates a new fairness problem and does not fix the error rate.

Q4 · A team plans to add bias testing and a human-review step 'as a compliance check the week before launch'. What is the problem with this timing? (Select one)

A. Nothing; a pre-launch check is the standard place for it. B. Responsible AI practices belong in planning; retrofitting after design is far more expensive and may force re-architecture. C. Bias testing should be skipped for internal tools. D. Human review always slows launches too much to be worth it.

Answer: B. Governance by design integrates these practices when they are cheapest to satisfy; a week before launch, adding a human loop can mean re-architecture. A pre-launch check (A) is exactly the anti-pattern. Skipping bias testing (C) and dismissing human review (D) are both wrong on the merits.

Q5 · Which TWO conditions make human-in-the-loop oversight mandatory rather than optional? (Select two)

A. The decision is irreversible and affects a person’s rights. B. The output is generated quickly. C. The decision is in a regulated domain such as lending or clinical care. D. The output is formatted as a table. E. The model scored highly on a launch-day accuracy test.

Answer: A and C. Irreversibility with rights impact, and regulated domains, both force a mandatory human gate. Speed (B) and formatting (D) are irrelevant to stakes. A high launch-day accuracy score (E) does not remove the need for oversight on consequential decisions and says nothing about drift.

Q6 · An organisation routes every AI use-case request, however trivial, to a central AI review board that meets monthly. Teams have started using unapproved tools to avoid the wait. What is the BEST diagnosis and fix? (Select one)

A. The board should meet weekly to clear the backlog. B. This is governance theatre; tier decision rights so low-risk cases proceed with light controls and the board handles only high-risk cases, and provide an exception path. C. Ban all AI tools until the board catches up. D. Remove the board entirely; governance is slowing the business. E. Require two board approvals for every request.

Answer: B. Centralising every decision produces delay and shadow AI without adding safety — the definition of theatre. Tiering routes most cases away from the board. Meeting more often (A) or adding approvals (E) worsens the bottleneck. Banning tools (C) drives more shadow AI; removing governance (D) trades one failure for another.

Q7 · Under the AWS shared responsibility model for AI workloads, which of the following remains the CUSTOMER's responsibility even when using a fully managed AI service? (Select one)

A. Patching the physical servers running the service. B. Ensuring the underlying infrastructure is available. C. Deciding what the system is used for and whether its output is fit for purpose. D. Operating the managed-service control plane.

Answer: C. The customer always owns use-case appropriateness, oversight and output fitness — this never transfers. Physical patching (A), infrastructure availability (B) and control-plane operation (D) are AWS’s responsibility for the security of the cloud.

Q8 · A company classifies AI use cases into risk tiers and attaches a control set to each. A new customer-facing pricing tool is proposed. Which tier and control profile fits BEST? (Select one)

A. Minimal tier; team-lead approval, optional oversight. B. High tier; review-board approval, human-in-the-loop on edge and adverse cases, continuous monitoring including bias drift. C. Limited tier; monthly monitoring is sufficient with no board involvement. D. Critical tier requiring a regulator sign-off before any use.

Answer: B. Customer-facing pricing can produce unfair or discriminatory outcomes and touches many people, placing it in the high tier with board approval, targeted human oversight and continuous bias-drift monitoring. Minimal (A) and limited (C) under-govern a customer-facing fairness risk. Critical with mandatory regulator sign-off (D) over-governs a pricing tool that is not a lending or clinical decision.

Q9 · A generative customer-service assistant occasionally states company policies that do not exist. Which safeguard MOST directly addresses this? (Select one)

A. Increase the assistant’s response speed. B. Add contextual grounding checks that verify answers against the approved policy source, with escalation to a human when grounding fails. C. Give the assistant a friendlier tone. D. Reduce the number of topics it can discuss to zero.

Answer: B. Grounding checks against a trusted source catch hallucinated policy and route uncertain cases to a human — the veracity control. Speed (A) and tone (C) do nothing about accuracy. Reducing topics to zero (D) removes the assistant’s value rather than making it reliable.

Q10 · A vendor pitches a generative tool for producing marketing copy. Which TWO questions are MOST important for a business leader to ask before signing, to manage intellectual-property risk? (Select two)

A. What is the training-data provenance and who owns the generated output? B. Do you offer IP indemnity for outputs, and what are its limits? C. What colour is the product dashboard? D. How many employees does your company have? E. Can you increase the font size in reports?

Answer: A and B. Provenance, output ownership and indemnity are the IP-risk questions that decide whether the company can safely publish and reuse the output. Dashboard colour (C), company headcount (D) and font size (E) are irrelevant to IP exposure.

Q11 · A model that was fair at launch begins producing more errors for one demographic group six months later, as the customer base shifts. What does this illustrate and how should it be managed? (Select one)

A. A one-time labelling error; relabel the training set once. B. Bias drift; monitor fairness per protected group continuously in production, not just at launch. C. A pricing problem; adjust the price. D. A privacy breach; notify the regulator.

Answer: B. Fairness degrading over time as inputs shift is bias drift, which requires ongoing per-group monitoring. A one-time relabel (A) does not address post-launch drift. It is not a pricing (C) or privacy (D) issue on the facts given.

Q12 · Which statement about production monitoring for an AI system is CORRECT? (Select one)

A. Once a pilot passes, ongoing monitoring adds no value. B. Monitoring should be continuous because model drift and data-quality degradation can erode performance after launch. C. Monitoring only matters for the infrastructure’s uptime. D. A single launch-day accuracy figure guarantees future performance.

Answer: B. Reliability is not a one-time property; drift and degradation require continuous monitoring. A passing pilot (A) and a launch-day figure (D) say nothing about future performance. Uptime monitoring (C) misses model-quality risks entirely.

Q13 · A hiring screening tool is proposed. Which THREE responsible AI dimensions are MOST directly at stake, and which is the correct set? (Select two)

A. Fairness and explainability, because outcomes across groups and contestability of a rejection both matter. B. Speed and cost, because the tool must be efficient. C. Transparency, because candidates should be told AI is used in screening. D. Robustness alone, because model stability is the only concern. E. Controllability and profitability, because the system must be shut off if unprofitable.

Answer: A and C. Hiring puts fairness (unequal outcomes across protected groups), explainability (a defensible reason for rejection) and transparency (candidates knowing AI is used) at stake. Speed and cost (B) are business objectives, not responsible AI dimensions. Robustness alone (D) is too narrow. Profitability (E) is not a responsible AI dimension.

Q14 · A team argues that because the AI vendor provides an IP indemnity, the company can publish generated content without review. What is the flaw? (Select one)

A. There is no flaw; indemnity fully removes the risk. B. Publishing infringing or harmful content in the company’s own name remains its reputational and legal exposure; indemnity has limits, and customer-facing review stays with the customer. C. Indemnity only applies to inputs, never outputs. D. The company should stop using generative AI entirely.

Answer: B. Indemnity may share risk but does not remove the company’s responsibility to review what it publishes under its own brand. Claiming indemnity fully removes risk (A) ignores its limits. Indemnity scope (C) is a distractor. Abandoning generative AI (D) is disproportionate.

Q15 · A business process uses AI to make automated decisions affecting individuals in a jurisdiction with risk-tiered AI regulation. When should compliance be considered? (Select one)

A. Only if a complaint is received after launch. B. During planning, by classifying the use case’s risk tier and attaching documentation, oversight and disclosure obligations as design inputs. C. Never; AI regulation does not apply to business processes. D. Only by the technical team during model training.

Answer: B. Compliance for a high-risk automated decision is a planning input: classify the tier and attach obligations before building. Waiting for complaints (A) is reactive and risky. Regulation does apply (C), and compliance is a business and legal responsibility, not only a training-time technical one (D).

Q16 · An 'AI ethics charter' document exists, but no one owns AI risk, there are no decision rights, and there is no path to approve an unusual case. Which is the BEST characterisation? (Select one)

A. The organisation has effective governance because the charter covers principles. B. This is governance theatre; a document without owners, decision rights and an exception path does not make anything safer. C. The charter is sufficient once printed and posted. D. Governance is unnecessary if a charter exists.

Answer: B. Governance needs assigned ownership, tiered decision rights and a real exception path — a principles document alone is theatre. A charter without operating mechanisms is not effective governance (A, C, D).

Q17 · A retail assistant both answers product questions and can issue refunds up to a value. How should governance treat these capabilities? (Select one)

A. Govern the whole assistant at the lowest applicable tier. B. Split by capability: govern the Q&A path at a limited tier and the refund path at a higher tier with human approval above a threshold and an escalation path. C. Govern everything at the critical tier requiring regulator sign-off. D. Do not govern it because a chatbot is inherently low risk.

Answer: B. Governance attaches to capability and its harm: the money-moving refund path needs stronger controls than the Q&A path. Using the lowest tier for everything (A) under-governs refunds. Critical-tier regulator sign-off (C) over-governs a retail refund. “Chatbots are low risk” (D) ignores the refund capability.

Q18 · Which of the following BEST distinguishes controllability from veracity as responsible AI dimensions? (Select one)

A. They are the same dimension under different names. B. Controllability is whether a human can steer, override or stop the system; veracity is whether the output is truthful and grounded. C. Controllability is about cost; veracity is about speed. D. Controllability applies only to agents; veracity only to chatbots.

Answer: B. Controllability concerns human command over the system; veracity concerns the truthfulness of its output — distinct dimensions. They are not the same (A), not about cost or speed (C), and both apply broadly rather than to one solution type (D).

Q19 · A content-moderation model over-blocks posts from one community and under-blocks harmful posts from another. Which TWO dimensions are most directly implicated, and what is the correct pair? (Select two)

A. Fairness, because moderation outcomes are unequal across communities. B. Safety, because harmful content is being under-blocked. C. Cost efficiency, because moderation is expensive. D. Latency, because the model is slow. E. Marketability, because moderation affects brand.

Answer: A and B. Unequal moderation across communities is a fairness failure, and under-blocking harmful content is a safety failure — both must be addressed. Cost (C), latency (D) and marketability (E) are business considerations, not the responsible AI dimensions at stake.

Q20 · A leader must choose between a highly accurate black-box model and a slightly less accurate explainable model for consumer credit decisions. What is the BEST approach? (Select one)

A. Always choose the most accurate model regardless of explainability. B. For consequential, contestable credit decisions, prefer the explainable model or require an explainable path (reason codes, review), because the decision must be defensible to the applicant and the regulator. C. Always choose the explainable model for every use case. D. Let the data-science team decide alone.

Answer: B. In a regulated, contestable decision, explainability is a requirement, so the trade-off resolves toward the explainable option or an explainable path. Always choosing accuracy (A) ignores the regulatory need. Always choosing explainability (C) is too absolute for low-stakes cases. Delegating solely to data science (D) removes the business and compliance judgement.

Q21 · Where do the NIST AI RMF functions fit when a business leader is asked to 'apply a risk classification framework'? (Select one)

A. They are AWS services to be provisioned. B. They are functions — Govern, Map, Measure, Manage — that scaffold how an organisation identifies, assesses and treats AI risk across the lifecycle. C. They are pricing tiers for a foundation model. D. They are the eight responsible AI dimensions.

Answer: B. The NIST AI RMF’s four functions provide a lifecycle scaffold for managing AI risk, useful when tiering and controlling use cases. They are not AWS services (A) or pricing tiers (C), and they are distinct from the responsible AI dimensions (D).

Q22 · A pilot chatbot passed testing and was deployed with only infrastructure uptime monitoring. Three months later it is giving outdated answers. What governance gap does this reveal? (Select one)

A. None; uptime monitoring is the correct production control. B. Missing model-level monitoring: drift and data-quality degradation require continuous, quality-focused monitoring and a refresh policy, not just uptime. C. The chatbot should have been faster. D. The pilot should never have been run.

Answer: B. Reliability failures (drift, stale data) are model-quality issues that uptime monitoring cannot catch; production needs quality monitoring and a refresh policy. Uptime alone (A) is insufficient. Speed (C) is unrelated, and running a pilot (D) was appropriate — the gap is post-launch monitoring.

Key takeaways

AWS publishes eight responsible AI dimensions; the exam guide names a six-item subset — know both, and match the harm described to the dimension.
The hardest skill is navigating trade-offs: name both sides, size the harm, and pick a proportional, conditional control rather than an absolute pole.
Governance by design integrates responsible AI in planning; retrofitting after launch is far more expensive and sometimes impossible.
Human oversight is mandatory for irreversible, regulated, rights-affecting and safety-critical decisions; safeguards include guardrails, grounding checks, escalation criteria and approval thresholds.
Effective governance tiers decision rights and reserves the board for high risk; routing everything to a committee is theatre that drives shadow AI.
On the shared responsibility model, AWS secures the cloud; the customer always owns use-case appropriateness, oversight and output fitness.
Use a risk-tier to control-set matrix to attach proportional approvals, oversight, monitoring, documentation and escalation to each tier.
Bias enters at multiple lifecycle stages and drifts after launch; monitoring must be continuous and segmented by group, and reliability (hallucination, degradation, drift) is never a one-time property.