Practice vocabulary for AI governance: EU AI Act risk categories, NIST AI RMF, human review requirements, and AI audit language.
0 / 26 completed
1 / 26
Under the EU AI Act, a social scoring system used by a government is classified as ___ risk and is prohibited.
The EU AI Act's unacceptable risk category covers AI practices that pose a clear threat to fundamental rights — such as social scoring, real-time biometric surveillance in public spaces, and manipulation of vulnerable people. These are prohibited.
2 / 26
A credit-scoring AI falls into the EU AI Act's ___ risk category. What does this require of the developer?
High-risk AI systems under the EU AI Act (e.g., credit scoring, hiring tools, critical infrastructure) must undergo conformity assessment, maintain technical documentation, implement risk management, and be registered in the EU database.
3 / 26
Your team refers to the ___ AI RMF when designing your AI risk management process. What does this acronym stand for?
The NIST AI RMF (AI Risk Management Framework) is a voluntary US framework that helps organizations identify, assess, and manage AI risks across four core functions: Govern, Map, Measure, and Manage.
4 / 26
The compliance team confirms: 'This system requires a ___ review before any decision is finalised.' What safeguard is this?
Human review (or human-in-the-loop) is a governance control that requires a person to examine and approve or override an AI decision before it becomes final — required for high-risk systems under frameworks like the EU AI Act.
5 / 26
The governance office schedules an AI ___ to verify compliance with internal policies and external regulations.
An AI audit is a structured, formal examination of an AI system to verify it meets regulatory requirements, internal policies, and ethical standards — covering documentation, data practices, model behaviour, and incident logs.
6 / 26
PR Description
Subject: Refactor User Profile API - Enhanced Bias Detection
During the code review of the new user profile API, lead developer Sarah flagged a potential issue. She suggested adding more granular controls to mitigate bias introduced during data enrichment, referencing discussions about 'explainable AI' and 'differential privacy' within the team's recent stand-up. She asked you to include a comment in the PR describing how you addressed this concern. Which of the following best reflects the kind of phrasing Sarah would expect to see in your comment?
This question tests understanding of applying AI governance vocabulary within a practical development scenario. Sarah's comment demonstrates an expectation beyond simply stating 'compliance.' She's asking for a description of *how* bias mitigation was addressed – specifically referencing techniques like differential privacy which are core to many modern AI governance frameworks. Option A is too rigid, option C emphasizes the crucial aspects of explainability and documentation that align with current best practices, and option D inappropriately delegates responsibility. The correct answer demonstrates awareness of technical approaches related to responsible AI development.
7 / 26
Alex, a data scientist at 'Innovate Solutions,' is reviewing a PR for a new AI-powered customer support chatbot. The team has implemented differential privacy to minimize the risk of revealing sensitive user information. Sarah, the lead developer, comments: 'Great job incorporating differential privacy! Can you add more detail about how you're monitoring the system's output for potential biases?' Which phrasing best reflects what Sarah would expect in the PR comment?
Sarah wants reassurance that the team is actively managing the risks associated with bias in the AI system. Simply stating they've used differential privacy isn't enough; she needs specifics on how it's being monitored and applied. This demonstrates a proactive approach to AI governance.
8 / 26
Ben, a junior developer at 'QuantumLeap Tech,' is drafting the description for a PR introducing an automated risk assessment tool. The tool uses machine learning to predict potential regulatory violations based on company data. David, the compliance officer, asks Ben to clarify how they've addressed 'explainability' in the system's output. David wants to know if users can understand *why* the tool flagged a particular risk. Which of the following best describes the information Ben should include in the PR description?
Explainability is crucial for regulatory compliance and building trust. Ben needs to outline how the tool's logic is translated into understandable terms, demonstrating accountability and allowing users to challenge findings. This aligns with the broader concept of AI governance frameworks.
9 / 26
Chloe, a developer at 'Synergy Dynamics,' is reviewing a PR for an AI system designed to optimize supply chain logistics. The team has adopted an 'AI Risk Management Framework' (ARMF) during the development process. The governance office informs her that they require a formal 'Risk Assessment' as part of their ongoing monitoring. Which aspect of the ARMF does this statement primarily relate to?
The ARMF emphasizes proactive risk management. The 'Risk Assessment' component is central to this framework – it's about systematically identifying potential harms (like supply chain disruptions or biased decisions) and developing strategies to address them before they occur. This directly supports the goals of AI governance.
10 / 26
PR Description
Subject: Refactor User Profile API - Enhanced Bias Detection
During the code review of the new user profile API, lead developer Sarah flagged a potential issue. She suggested adding more granular controls to mitigate bias introduced during data enrichment, referencing discussions about 'explainable AI' and 'differential privacy' within the team's recent stand-up. She asked you to include a comment in the PR describing how you addressed this concern. Which of the following best reflects the kind of phrasing Sarah would expect to see in your comment?
This question tests understanding of applying AI governance vocabulary within a practical development scenario. Sarah's comment demonstrates an expectation beyond simply stating 'compliance.' She's asking for a description of *how* bias mitigation was addressed – specifically referencing techniques like differential privacy which are core to many modern AI governance frameworks. Option A is too rigid, option C emphasizes the crucial aspects of explainability and documentation that align with current best practices, and option D inappropriately delegates responsibility. The correct answer demonstrates awareness of technical approaches related to responsible AI development.
11 / 26
Alex, a data scientist at 'Innovate Solutions,' is reviewing a PR for a new AI-powered customer support chatbot. The team has implemented differential privacy to minimize the risk of revealing sensitive user information. Sarah, the lead developer, comments: 'Great job incorporating differential privacy! Can you add more detail about how you're monitoring the system's output for potential biases?' Which phrasing best reflects what Sarah would expect in the PR comment?
Sarah wants reassurance that the team is actively managing the risks associated with bias in the AI system. Simply stating they've used differential privacy isn't enough; she needs specifics on how it's being monitored and applied. This demonstrates a proactive approach to AI governance.
12 / 26
Ben, a junior developer at 'QuantumLeap Tech,' is drafting the description for a PR introducing an automated risk assessment tool. The tool uses machine learning to predict potential regulatory violations based on company data. David, the compliance officer, asks Ben to clarify how they've addressed 'explainability' in the system's output. David wants to know if users can understand *why* the tool flagged a particular risk. Which of the following best describes the information Ben should include in the PR description?
Explainability is crucial for regulatory compliance and building trust. Ben needs to outline how the tool's logic is translated into understandable terms, demonstrating accountability and allowing users to challenge findings. This aligns with the broader concept of AI governance frameworks.
13 / 26
Chloe, a developer at 'Synergy Dynamics,' is reviewing a PR for an AI system designed to optimize supply chain logistics. The team has adopted an 'AI Risk Management Framework' (ARMF) during the development process. The governance office informs her that they require a formal 'Risk Assessment' as part of their ongoing monitoring. Which aspect of the ARMF does this statement primarily relate to?
The ARMF emphasizes proactive risk management. The 'Risk Assessment' component is central to this framework – it's about systematically identifying potential harms (like supply chain disruptions or biased decisions) and developing strategies to address them before they occur. This directly supports the goals of AI governance.
14 / 26
PR Description
Subject: Refactor User Profile API - Enhanced Bias Detection
During the code review of the new user profile API, lead developer Sarah flagged a potential issue. She suggested adding more granular controls to mitigate bias introduced during data enrichment, referencing discussions about 'explainable AI' and 'differential privacy' within the team's recent stand-up. She asked you to include a comment in the PR describing how you addressed this concern. Which of the following best reflects the kind of phrasing Sarah would expect to see in your comment?
This question tests understanding of applying AI governance vocabulary within a practical development scenario. Sarah's comment demonstrates an expectation beyond simply stating 'compliance.' She's asking for a description of *how* bias mitigation was addressed – specifically referencing techniques like differential privacy which are core to many modern AI governance frameworks. Option A is too rigid, option C emphasizes the crucial aspects of explainability and documentation that align with current best practices, and option D inappropriately delegates responsibility. The correct answer demonstrates awareness of technical approaches related to responsible AI development.
15 / 26
Alex, a data scientist at 'Innovate Solutions,' is reviewing a PR for a new AI-powered customer support chatbot. The team has implemented differential privacy to minimize the risk of revealing sensitive user information. Sarah, the lead developer, comments: 'Great job incorporating differential privacy! Can you add more detail about how you're monitoring the system's output for potential biases?' Which phrasing best reflects what Sarah would expect in the PR comment?
Sarah wants reassurance that the team is actively managing the risks associated with bias in the AI system. Simply stating they've used differential privacy isn't enough; she needs specifics on how it's being monitored and applied. This demonstrates a proactive approach to AI governance.
16 / 26
Ben, a junior developer at 'QuantumLeap Tech,' is drafting the description for a PR introducing an automated risk assessment tool. The tool uses machine learning to predict potential regulatory violations based on company data. David, the compliance officer, asks Ben to clarify how they've addressed 'explainability' in the system's output. David wants to know if users can understand *why* the tool flagged a particular risk. Which of the following best describes the information Ben should include in the PR description?
Explainability is crucial for regulatory compliance and building trust. Ben needs to outline how the tool's logic is translated into understandable terms, demonstrating accountability and allowing users to challenge findings. This aligns with the broader concept of AI governance frameworks.
17 / 26
Chloe, a developer at 'Synergy Dynamics,' is reviewing a PR for an AI system designed to optimize supply chain logistics. The team has adopted an 'AI Risk Management Framework' (ARMF) during the development process. The governance office informs her that they require a formal 'Risk Assessment' as part of their ongoing monitoring. Which aspect of the ARMF does this statement primarily relate to?
The ARMF emphasizes proactive risk management. The 'Risk Assessment' component is central to this framework – it's about systematically identifying potential harms (like supply chain disruptions or biased decisions) and developing strategies to address them before they occur. This directly supports the goals of AI governance.
18 / 26
PR Description
Subject: Refactor User Profile API - Enhanced Bias Detection
During the code review of the new user profile API, lead developer Sarah flagged a potential issue. She suggested adding more granular controls to mitigate bias introduced during data enrichment, referencing discussions about 'explainable AI' and 'differential privacy' within the team's recent stand-up. She asked you to include a comment in the PR describing how you addressed this concern. Which of the following best reflects the kind of phrasing Sarah would expect to see in your comment?
This question tests understanding of applying AI governance vocabulary within a practical development scenario. Sarah's comment demonstrates an expectation beyond simply stating 'compliance.' She's asking for a description of *how* bias mitigation was addressed – specifically referencing techniques like differential privacy which are core to many modern AI governance frameworks. Option A is too rigid, option C emphasizes the crucial aspects of explainability and documentation that align with current best practices, and option D inappropriately delegates responsibility. The correct answer demonstrates awareness of technical approaches related to responsible AI development.
19 / 26
Alex, a data scientist at 'Innovate Solutions,' is reviewing a PR for a new AI-powered customer support chatbot. The team has implemented differential privacy to minimize the risk of revealing sensitive user information. Sarah, the lead developer, comments: 'Great job incorporating differential privacy! Can you add more detail about how you're monitoring the system's output for potential biases?' Which phrasing best reflects what Sarah would expect in the PR comment?
Sarah wants reassurance that the team is actively managing the risks associated with bias in the AI system. Simply stating they've used differential privacy isn't enough; she needs specifics on how it's being monitored and applied. This demonstrates a proactive approach to AI governance.
20 / 26
Ben, a junior developer at 'QuantumLeap Tech,' is drafting the description for a PR introducing an automated risk assessment tool. The tool uses machine learning to predict potential regulatory violations based on company data. David, the compliance officer, asks Ben to clarify how they've addressed 'explainability' in the system's output. David wants to know if users can understand *why* the tool flagged a particular risk. Which of the following best describes the information Ben should include in the PR description?
Explainability is crucial for regulatory compliance and building trust. Ben needs to outline how the tool's logic is translated into understandable terms, demonstrating accountability and allowing users to challenge findings. This aligns with the broader concept of AI governance frameworks.
21 / 26
Chloe, a developer at 'Synergy Dynamics,' is reviewing a PR for an AI system designed to optimize supply chain logistics. The team has adopted an 'AI Risk Management Framework' (ARMF) during the development process. The governance office informs her that they require a formal 'Risk Assessment' as part of their ongoing monitoring. Which aspect of the ARMF does this statement primarily relate to?
The ARMF emphasizes proactive risk management. The 'Risk Assessment' component is central to this framework – it's about systematically identifying potential harms (like supply chain disruptions or biased decisions) and developing strategies to address them before they occur. This directly supports the goals of AI governance.
22 / 26
Alex, a data scientist, is reviewing a PR comment from Sarah regarding the new customer support chatbot. She writes: 'I'm concerned about the potential for unintended bias in the training data. Have we thoroughly assessed the 'fairness' metrics and implemented mitigation strategies aligned with an ARMF?' Which of the following best captures the essence of Sarah's concern?
The question focuses on Sarah's concern about bias in the AI system. She's specifically referencing an 'AI Risk Management Framework' (ARMF), which mandates a structured approach to identifying and mitigating risks related to fairness and ethical considerations in AI development. This highlights the importance of proactively addressing potential biases, not just optimizing performance.
23 / 26
Ben, a junior developer, is discussing the new risk assessment tool with his team in Slack. Liam asks: 'So, what's the status of incorporating 'explainability' into the model? We need to ensure we can trace back *why* it flagged that violation.' Considering the context of AI governance frameworks, which statement best reflects Ben's request?
The core of Ben's request centers around 'explainability'. This is a key component often addressed within an ARMF – particularly concerning transparency and accountability in AI systems. While documentation is helpful, the emphasis here is on understanding the model's decision-making process, not just its output. The question tests recognition of XAI principles.
24 / 26
Chloe, a developer at Synergy Dynamics, is drafting the PR description for an AI system optimizing supply chain logistics. She writes: 'This update incorporates mechanisms to monitor model drift and ensure ongoing compliance with evolving regulatory standards, as defined by our ARMF.' What does Chloe's statement primarily emphasize?
Chloe's statement directly highlights the importance of ongoing monitoring and compliance. An 'AI Risk Management Framework' (ARMF) necessitates continuous oversight to identify and address potential risks – including regulatory changes. This focus on drift detection is a standard practice within such frameworks, ensuring long-term system viability.
25 / 26
David, a developer at 'NovaTech Solutions,' is giving his daily standup update. He says: 'I've been focusing on implementing the bias detection layer for the user profile API, following our team's ARMF to ensure we meet ethical guidelines.' What key aspect of David's statement does he emphasize?
David's statement underscores the importance of a structured methodology. By explicitly mentioning the 'AI Risk Management Framework' (ARMF), he demonstrates an understanding that ethical considerations are integral to the development process – not just a superficial add-on. This is crucial for demonstrating accountability and responsible AI practices.
26 / 26
A developer receives the following API response after querying an AI risk assessment tool: `{'prediction': 'High Risk', 'confidence': 0.95, 'explanation': 'Based on historical data and current regulations, this transaction exhibits characteristics associated with potential money laundering.'}` Considering the context of AI governance frameworks, what does this response primarily communicate?
The response's value lies in its inclusion of an 'explanation'. This is vital for transparency and accountability – key components of an 'AI Risk Management Framework' (ARMF). The confidence level further provides context to the prediction, allowing users to assess the reliability of the assessment.
What will I practice in "AI Governance Frameworks Vocabulary"?
This is an AI Ethics exercise set. It walks through 26 scenario-based multiple-choice questions built around real usage of AI Ethics terminology that IT professionals encounter on the job.
Is this exercise free to use?
Yes. Every exercise on CoderSlingo, including this one, is free to complete with no account, sign-up, or paywall.
How many questions are in this exercise?
This set contains 26 questions. Each one shows immediate feedback and a detailed explanation after you answer, so you learn the correct usage right away rather than waiting for a final score.
Do I need prior experience to complete this exercise?
No prior experience is required. Each question includes a full explanation covering the reasoning behind the correct answer, so the exercise itself teaches the AI Ethics vocabulary as you go.
Can I retry the exercise if I get questions wrong?
Yes — use the "Try again" button on the results screen to reset your answers and go through all the questions again. There is no limit on attempts.
Is my progress saved?
Your answers and score for the current session are tracked in the browser as you go. No account or login is needed, and there is nothing to install.
What if I don't understand a term used in a question?
Read the explanation shown after you answer each question — it breaks down the correct term in plain English with a real-world example. You can also check the site Glossary for quick definitions.
How is this different from reading a blog article on the topic?
Exercises like this one are interactive drills that test and reinforce specific vocabulary through multiple-choice questions, while blog articles explain concepts in prose. Practising here after reading builds active recall, not just passive recognition.
Where can I find more AI Ethics exercises?
See the AI Ethics exercises hub for the full set of related pages, or browse all exercise categories from the main Exercises index.
Can I use this exercise to prepare for a technical interview?
Yes — AI Ethics vocabulary comes up often in technical discussions and interviews. Pair this exercise with our dedicated Interview Preparation section for role-specific practice.