Domain 6 of 6

Regulatory Requirements and Governance

The EU AI Act's risk tiers and what each obliges, the NIST framework's four functions, ISO 42001 and the documentation a team wishes it had started keeping a year earlier.

5
Concepts
~15%
Of the exam
13
Practice questions
Concepts in this domain
01The EU AI ActFour risk tiers, what each obliges, where the timeline stands after the 2026 amendments, and how a team works out which tier a feature falls into before somebody else does.02The NIST AI Risk Management FrameworkFour functions, govern, map, measure and manage, the seven characteristics of a trustworthy system, and why the voluntary framework is worth more to a product team than the law it is not.03AI governance and complianceThe standards an AI system gets audited against, what data governance means once a model is involved, the review routine that keeps a deployed system accountable and the tooling that does each job.04Secure AI and the Secure AI FrameworkSecurity across the machine learning lifecycle, what Google's Secure AI Framework is for and what it became, and the Google Cloud tools the Gen AI Leader exam expects a candidate to name.05The AI supply chainWhat a team is actually depending on when it ships an AI feature, how those dependencies fail, and the provenance work that has to happen while it is still boring.
Try a question from this domain

A company based outside the European Union offers a hiring tool used by employers in Germany. Which statement about the EU AI Act is correct?

  • AIt does not apply, because the company has no European establishment.
  • BIt applies, because the Act reaches systems whose output is used in the Union whoever produced them.
  • CIt applies only if the company opens a European office.
  • DIt applies only to the German employers, not to the company supplying the tool.
13 questions on this domain.

One per page, with a worked explanation.

Start the set