Preparation guide
ISO 42001 Lead Auditor study guide
Use the source-backed decision map, original scenario and study sequence before practising.
Read the study guidePECB exam preparation
ISO/IEC 42001 Lead Auditorexam preparation
The ISO/IEC 42001 Lead Auditor exam is a three-hour, open-book PECB certification examination for professionals who audit artificial intelligence management systems. It contains 80 multiple-choice questions across seven weighted competency domains and has a 70% pass mark. The largest domain assesses how candidates conduct an AIMS audit, while other domains cover audit principles, preparation, closure and programme management.
- Questions
- 80
- Pass mark
- 70%
- Domains
- 7
- Format
- Open book
Choose what you need
Training, free examples and full preparation are separate.
Select the path that matches what you already have. Your Labs purchase unlocks only this exact exam.
Start here
Five free questions
See original questions, correct answers, distractor reasoning and sources without creating an account.
Try free questionsFull Aegentra Labs access
$49 + GST for 1 month
Or $99 + GST for 12 months. Complete bank, casual mode, exam mode, saved results and domain feedback.
Choose Labs accessOfficial PECB training
Need the course and exam pathway?
Buy official course materials and the applicable examination pathway separately through Aegentra Academy.
View the official courseAeges AI · Learning Intelligence
Results analysed with Aeges AI
Complete a ISO/IEC 42001 Lead Auditor practice session, then use Aeges AI learning intelligence to understand how your submitted answers performed across the qualification. For this exam, the analysis separates AIMS audit principles, planning, evidence, findings, closing activities and audit-programme decisions.
See how Aeges AI works- Competency map
- 7 domains
- Learning signal
- Relative strength and gap
- Next decision
- Revision priority
Written by Harry Sidhu, ISO 27001 Lead Implementer · Director and Principal Consultant, Aegentra. Facts are checked against the published sources listed below.
Published exam facts
What is on the ISO/IEC 42001 Lead Auditor exam?
These facts come from PECB’s published documents. Where PECB does not publish a detail, this page says so instead of repeating an unsupported figure.
- Questions
- 80
- Pass mark
- 70%
- Duration
- 180 minutes
Stand-alone and scenario-based multiple choice.
Equivalent to 56 correct answers from 80 questions.
Open-book materials
What you may bring- ISO standardA hard copy of the ISO/IEC 42001 standard
- Course materialsTraining course materials, through the PECB Exams app and/or printed
- Personal notesPersonal notes taken during the training course, through the PECB Exams app and/or printed
Retakes: Partner-delivered training includes the first attempt and one free retake within 12 months. PECB waiting periods and other examination rules still apply.
Your revision map
How does the practice bank cover the domains?
PECB identifies the seven competency domains on its current course page, but the current page does not publish their percentage split. Aegentra Labs therefore presents the 12, 8, 16, 9, 19, 7 and 9-question split as its practice allocation rather than as a current PECB weighting.
- Domain 115%12 questions
Fundamental principles and concepts of an AI management system
AI concepts, governance principles, risks, impacts and the purpose and structure of an artificial intelligence management system.
- Domain 210%8 questions
AI management system requirements
ISO/IEC 42001 clauses 4 to 10, Annex A control objectives, documented information and evidence of operating AIMS processes.
- Domain 320%16 questions
Fundamental audit concepts and principles
Audit types, principles, evidence, criteria, objectives, scope, independence, competence, risk-based auditing and professional judgement.
- Domain 411.25%9 questions
Preparing for an ISO/IEC 42001 audit
Client acceptance, feasibility, audit objectives and scope, document review, planning, sampling, working papers and opening-meeting preparation.
- Domain 523.75%19 questions
Conducting an ISO/IEC 42001 audit
Interviews, observation, evidence testing, AI lifecycle sampling, control evaluation, findings, communication and management of an audit team.
- Domain 68.75%7 questions
Closing an ISO/IEC 42001 audit
Drafting findings, classifying nonconformities, closing meetings, audit reports, corrective-action plans and follow-up verification.
- Domain 711.25%9 questions
Managing an ISO/IEC 42001 audit program
Audit-program objectives, resources, competence, records, monitoring, combined audits, surveillance, recertification and continual improvement.
Question structure
What kinds of questions are asked?
Expect a mix of direct knowledge checks and applied scenarios. The emphasis is on choosing the action a competent lead auditor would take.
- Stand-alone multiple choice
- Independent questions have three options: one keyed response and two plausible distractors. They test concepts, responsibilities, evidence and professional judgement.
- Scenario-based multiple choice
- A written organisational scenario supports related questions that require candidates to analyse evidence, identify weaknesses and choose the most appropriate next action.
- Evaluation-level decisions
- Higher-weighted domains ask candidates to compare reasonable alternatives and select the action that best achieves the intended outcome, not merely recall a definition.
Study strategy
How should you sequence your study?
Study this as an audit lifecycle. A strong candidate can move from criteria and risk-based planning to evidence, findings, reporting and programme improvement without taking ownership of the auditee’s system.
- Refresh the AIMS criteria. Review clauses 4 to 10, Annex A and AI-specific risk and impact concepts from an auditor’s perspective.
- Master audit principles. Independence, fair presentation, confidentiality, due care, evidence and risk-based planning shape every later decision.
- Plan one audit end to end. Define objectives, criteria, scope, competence, sampling and working papers for an imagined AIMS.
- Practise evidence chains. For each control, connect interview statements, records, observations and system evidence before reaching a conclusion.
- Close and follow up carefully. Write evidence-based findings, classify nonconformities and distinguish correction from effective corrective action.
Where do candidates actually lose marks?
Auditor questions often present several technically possible actions. The best answer preserves independence, follows the audit plan and produces a defensible evidence trail.
- Consulting during the audit. An auditor can clarify criteria but should not design the auditee’s controls or corrective action.
- Accepting documents as operation. A policy establishes intent; operating evidence establishes whether the practice works.
- Sampling what is convenient. Samples should respond to risk, objectives, scope and changes rather than only to easy-to-retrieve records.
- Writing vague findings. A defensible nonconformity connects criteria, objective evidence and the precise unmet requirement.
Candidate questions
ISO/IEC 42001 Lead Auditor exam FAQs
Direct answers about time, materials, retakes, credentials and the knowledge expected before exam day.
How many questions are in the ISO/IEC 42001 Lead Auditor exam?
The current English multiple-choice examination contains 80 questions. Aegentra Labs follows the published competency-domain allocation when building the full simulation, so the practice result reflects the structure of the examination rather than an arbitrary mix of topics.
How long is the ISO/IEC 42001 Lead Auditor exam?
The published examination duration is three hours. Candidates should reserve time to read scenario material, review flagged questions and complete a final check rather than budgeting every minute only for the first pass.
Is the ISO/IEC 42001 Lead Auditor exam open book?
Yes. The current English examination is open book, but permitted materials are limited to the main reference standard or framework, PECB training material and personal course notes. Internet searching and unrestricted reference material are not permitted.
What score is required to pass the ISO/IEC 42001 Lead Auditor exam?
The published pass mark is 70%. Aegentra Labs recommends consistently scoring above that threshold across every domain, because a strong total can conceal a weak competency area that remains important in professional practice.
What credential follows the ISO/IEC 42001 Lead Auditor exam?
Passing allows an application for the appropriate PECB ISO/IEC 42001 Auditor credential tier. Passing the examination satisfies the exam requirement, but professional certification levels may also require relevant work, project or audit experience and acceptance of the PECB Code of Ethics.