SoftDeploy is planning to release a major update to its user-facing AI application, introducing a newly trained model designed to improve response accuracy and performance.
Given the application's critical nature and large user base, leadership is concerned about the potential effects of unforeseen model issues and unexpected behavior under real-world usage patterns. To reduce risk, the Release Manager creates a deployment strategy and chooses to deploy the new model first to a small, hidden subset of users (5%), while the remaining users continue interacting with the existing production model. If the
5% group experiences no errors, the release will be expanded.
Which deployment rollout strategy is applied in this scenario to reduce operational risk?

• A. Shadow Mode
• B. Offline Evaluation
• C. Big Bang Deployment
• D. Canary Rollout

Following a recent software update, OmniHealth's diagnostic AI has begun flagging benign skin conditions as malignant at an unprecedented rate. As the CDO, you are leading the response. Your team has successfully identified the anomaly. You are now in the containment phase and must stabilize the system without taking it fully offline, since it is critical for ongoing patient triage.
Which short-term containment action should be approved to restrict system throughput and prevent an overload of erroneous predictions while keeping the service partially available?

• A. Deploy a shadow model to compare predictions in the background
• B. Implement rate limiting
• C. Retrain the model immediately using the latest clinical dataset
• D. Perform a full system shutdown and disconnect all network access

An enterprise deploys an AI-enabled system that continuously affects security-critical operational decisions in its production environment. After the system becomes active, the organization assigns responsibility for ensuring that its real-time behavior stays within approved boundaries.
Within an AI Responsibility Matrix, which stakeholder role is responsible for supervising system outputs during live operation, responding to abnormal or unexpected behavior, coordinating corrective actions with technical and governance teams, and ensuring issues are escalated through formal review channels?

• A. Deployers/Operators
• B. AI Governance Authority
• C. Governments/Regulators
• D. AI Development Lead

SilverLine Insurance is classifying its AI vendors under the "Vendor Risk Tiers" model. The Chief Information Security Officer (CISO) identifies a vendor that supports the core claims-processing engine, for which failure would cause major legal exposure and significant harm.
Which vendor risk tier is most appropriate for this vendor based on its criticality and potential impact?

• A. Tier 4: Low-Criticality Vendors
• B. Tier 1: Mission-Critical Vendors
• C. Tier 3: Medium-Criticality Vendors
• D. Tier 2 High-Criticality Business Systems