ISO-IEC-42001-Foundation 試験問題を無料オンラインアクセス

A telecommunications operator is choosing between two architectures for a customer-service AI assistant.
Option A retrains a very large foundation model weekly on internal data; Option B fine-tunes a substantially smaller model monthly. Both meet functional accuracy requirements. The AIMS lead is asked how ISO/IEC
42001 treats environmental considerations when an organisation selects an AI design. Which response BEST reflects the standard ' s intent?

• A.Environmental impact should be evaluated by the cloud provider rather than the operator, since the provider operates the underlying infrastructure and is better placed than the operator to compare the relative carbon profiles of competing architectures.
• B.Environmental impact is among the considerations the AI System Impact Assessment is expected to address, so the operator should evaluate the energy and compute footprint of each option alongside functional performance before approving an architecture.
• C.Environmental impact considerations apply solely to AI systems that perform climate-related functions such as emissions forecasting; for a customer service assistant the environmental dimension of architecture choice falls outside the relevant scope.
• D.Environmental considerations sit outside the AIMS and belong with the corporate sustainability team, so the AI architecture decision should be driven purely by functional accuracy and time-to-market without consideration of energy or compute footprint.

A start-up founder argues that ISO/IEC 42001 is irrelevant to her company because it neither develops AI models nor sells AI products-it merely uses a third-party generative AI assistant to draft customer support replies. The compliance lead disagrees and points to the standard ' s scope as described in the GAICC Foundation materials. Which statement BEST captures who ISO/IEC 42001 is intended for?

• A.Any organisation that develops, provides, or uses AI systems, irrespective of size, sector, or AI maturity, including those that consume AI through third-party tools.
• B.Organisations that build and train their own AI models from scratch, since the standard targets AI developers rather than downstream users of third-party vendor tools.
• C.Enterprises above a defined revenue threshold, since the cost and complexity of an AI management system is disproportionate for smaller firms or early-stage start-ups.
• D.Public-sector bodies subject to AI legislation, since voluntary management system standards are intended for regulated entities rather than commercial start-ups.

A workshop exercise asks foundation candidates to evaluate four candidate sentences for inclusion in a one- page AI policy at an e-commerce retailer. The retailer uses AI for product recommendations, fraud detection, and customer-service triage. The intent is to capture a single sentence that aligns with the four attributes Clause 5.2 requires. Which sentence is the BEST single-line expression of those Clause 5.2 attributes?

• A.The retailer commits to certifying every AI system it deploys against ISO/IEC 42001 within a twelve- month window, with surveillance audits scheduled annually thereafter under the chosen third-party certification body for each system in operation.
• B.The retailer will manage its AI systems in a manner appropriate to its purpose, satisfy applicable requirements, set and pursue measurable AI objectives, and continually improve its AI management system in line with this policy.
• C.The retailer ' s recommendation engine will be retrained every fortnight using the most recent behavioural data from logged-in customers, and the fraud-detection model will be retuned monthly to reflect emerging patterns of attempted account compromise.
• D.The retailer will appoint an AI ethics committee composed of representatives from product, engineering, legal, and marketing with quarterly meetings, decisions recorded, and an annual report submitted to the board ' s risk subcommittee.

A foundation workshop case describes a small financial-advisory firm that has just signed its AI policy. The compliance officer asks what the firm should do next to translate the policy into operational practice for a new portfolio-recommendation AI tool the firm is preparing to deploy. Which next step BEST reflects how ISO
/IEC 42001 expects policy to connect to planning and operations for a specific AI system?

• A.Re-sign the AI policy in front of staff at the next quarterly town-hall meeting to demonstrate leadership commitment, on the basis that visible re-signing reinforces the message conveyed by the original signature at policy adoption.
• B.Defer further action until the firm has accumulated several months of live experience with the portfolio- recommendation tool, on the basis that risk and impact assessments are more accurate when informed by post-deployment operational data points.
• C.Conduct an AI risk assessment under Clause 6.1.2 and an AI System Impact Assessment under Clause
  6.1.4 for the portfolio-recommendation tool, then plan risk treatment with controls aligned to the policy
  ' s commitments.
• D.Print and laminate the signed policy for display in the office reception area, then distribute copies to each adviser ' s desk so that the document is visible during client meetings held in the firm ' s premises across the next quarter.

A small insurance firm is performing its first context analysis under Clause 4.1 of ISO/IEC 42001. The compliance lead lists the factors the team should consider. Which item BEST illustrates an EXTERNAL issue relevant to the AIMS, consistent with GAICC Foundation Module 4?

• A.The forthcoming enforcement of regional AI legislation, such as the EU AI Act, and evolving public expectations about transparency in automated insurance decisions.
• B.The current inventory of AI models deployed in the underwriting platform and the technical debt accumulated within the firm ' s own internal data pipelines over time.
• C.The firm ' s internal organisational culture and the maturity of its data engineering team, both of which influence how AI projects are scoped and delivered.
• D.The composition of the firm ' s senior leadership team and the way responsibilities for AI initiatives are currently allocated across internal business units.