This auditor sample uses the same clinical setting to test a different responsibility: establishing criteria, corroborating evidence and reaching an impartial conclusion without designing the auditee’s fix. Reveal each answer to see the reasoning and why the other options fail.
What this exact sample covers
AI audit evidence and role boundaries
Audit criteria and evidence
Impact-assessment sampling
Auditor independence
Question 01Domain 1 · recall
As auditor, which response best tests whether MedAssist has defined its AI system and lifecycle context?
ASet suitable criteria, obtain sufficient appropriate evidence and document the conclusion for AI system terminology and lifecycle context.
BAccept management explanation without corroborating evidence when reviewing AI system terminology and lifecycle context.
CTake ownership of the auditee process and design the corrective action on management behalf.
the answer and reasoning
Correct answerA. Set suitable criteria, obtain sufficient appropriate evidence and document the conclusion for AI system terminology and lifecycle context.
The stronger response connects AI system terminology and lifecycle context to a defined purpose, accountable action and usable evidence. Set suitable criteria, obtain sufficient appropriate evidence and document the conclusion for AI system terminology and lifecycle context. This avoids mistaking a document, assumption or outsourced activity for an effective and reviewable practice.
Why the other options fail
B. This response deflects an accountability that remains with the organisation or practitioner and would leave the relevant competency unevidenced.
C. This response treats the visible artefact as the outcome and does not establish that the underlying process is suitable, owned and operating.
Which audit response best evaluates whether responsible-AI principles operate beyond policy statements?
AAccept management explanation without corroborating evidence when reviewing responsible AI principles and organisational values.
BSet suitable criteria, obtain sufficient appropriate evidence and document the conclusion for responsible AI principles and organisational values.
CTake ownership of the auditee process and design the corrective action on management behalf.
the answer and reasoning
Correct answerB. Set suitable criteria, obtain sufficient appropriate evidence and document the conclusion for responsible AI principles and organisational values.
The stronger response connects responsible AI principles and organisational values to a defined purpose, accountable action and usable evidence. Set suitable criteria, obtain sufficient appropriate evidence and document the conclusion for responsible AI principles and organisational values. This avoids mistaking a document, assumption or outsourced activity for an effective and reviewable practice.
Why the other options fail
A. This response treats the visible artefact as the outcome and does not establish that the underlying process is suitable, owned and operating.
C. This response treats the visible artefact as the outcome and does not establish that the underlying process is suitable, owned and operating.
Which response best gathers evidence about AI risks, opportunities and affected stakeholders?
AAccept management explanation without corroborating evidence when reviewing AI risks, opportunities and affected stakeholders.
BTake ownership of the auditee process and design the corrective action on management behalf.
CSet suitable criteria, obtain sufficient appropriate evidence and document the conclusion for AI risks, opportunities and affected stakeholders.
the answer and reasoning
Correct answerC. Set suitable criteria, obtain sufficient appropriate evidence and document the conclusion for AI risks, opportunities and affected stakeholders.
The stronger response connects AI risks, opportunities and affected stakeholders to a defined purpose, accountable action and usable evidence. Set suitable criteria, obtain sufficient appropriate evidence and document the conclusion for AI risks, opportunities and affected stakeholders. This avoids mistaking a document, assumption or outsourced activity for an effective and reviewable practice.
Why the other options fail
A. This response treats the visible artefact as the outcome and does not establish that the underlying process is suitable, owned and operating.
B. This response deflects an accountability that remains with the organisation or practitioner and would leave the relevant competency unevidenced.
Which response best evaluates the adequacy of MedAssist’s AI system impact assessment?
ASet suitable criteria, obtain sufficient appropriate evidence and document the conclusion for AI system impact assessment.
BAccept management explanation without corroborating evidence when reviewing AI system impact assessment.
CTake ownership of the auditee process and design the corrective action on management behalf.
the answer and reasoning
Correct answerA. Set suitable criteria, obtain sufficient appropriate evidence and document the conclusion for AI system impact assessment.
The stronger response connects AI system impact assessment to a defined purpose, accountable action and usable evidence. Set suitable criteria, obtain sufficient appropriate evidence and document the conclusion for AI system impact assessment. This avoids mistaking a document, assumption or outsourced activity for an effective and reviewable practice.
Why the other options fail
B. This response deflects an accountability that remains with the organisation or practitioner and would leave the relevant competency unevidenced.
C. This response treats the visible artefact as the outcome and does not establish that the underlying process is suitable, owned and operating.
Which response best audits human oversight while preserving auditor independence?
AAccept management explanation without corroborating evidence when reviewing human oversight and accountability.
BSet suitable criteria, obtain sufficient appropriate evidence and document the conclusion for human oversight and accountability.
CTake ownership of the auditee process and design the corrective action on management behalf.
the answer and reasoning
Correct answerB. Set suitable criteria, obtain sufficient appropriate evidence and document the conclusion for human oversight and accountability.
The stronger response connects human oversight and accountability to a defined purpose, accountable action and usable evidence. Set suitable criteria, obtain sufficient appropriate evidence and document the conclusion for human oversight and accountability. This avoids mistaking a document, assumption or outsourced activity for an effective and reviewable practice.
Why the other options fail
A. This response treats the visible artefact as the outcome and does not establish that the underlying process is suitable, owned and operating.
C. This response treats the visible artefact as the outcome and does not establish that the underlying process is suitable, owned and operating.
Casual mode shows feedback as you answer. Full access adds the complete weighted bank, exam mode, saved results and domain-level analysis for this exact qualification.
