ECCouncil 612-51 - Certified Responsible AI Governance & Ethics (CRAGE)

An AI-powered discussion assistant is typically well behaved when answering individual prompts, but incident analysis shows that some harmful or inappropriate outputs arise only when a response is interpreted alongside earlier exchanges. Since existing keyword-based controls assess isolated messages, they either miss these nuanced situations or needlessly block legitimate conversations. A more precise filtering method is required-one that assesses usage patterns across interactions instead of considering each input independently.
Which content-filtering technique should be implemented to address this challenge?

• A. Natural Language Classification Models
• B. Pattern Matching Systems
• C. Context-Aware Filters
• D. Human Review Flags

A national cultural and education authority conducts an ethics review of its AI-supported public learning analytics platform. The review identifies major omissions: no assessment addressed cultural inclusion, environmental sustainability, community participation, gender equality, or societal impact. Stakeholder groups-teachers, parents, and cultural representatives-were not engaged during the design or validation phases. Auditors say these shortcomings conflict with an internationally adopted framework that stresses human rights, societal well-being, inclusive participation, and safeguarding cultural and social ecosystems.
As the Chief AI Governance Officer, which international AI ethics framework most closely aligns with the principles identified by the auditors?

• A. OECD
• B. DoD AI Ethical Principles
• C. UNESCO
• D. IEEE

As an AI system intended to influence automated decisions throughout a global delivery network enters pre- deployment testing, concerns emerge about the effects of incorrect outputs in areas connected to operational continuity and regulatory compliance. Because testing resources are limited, validating every possible behavior or interaction is not feasible. To focus testing on the areas where failures would create the greatest disruption, the organization must identify which parts of the system require the highest testing priority.
Which key component of a risk-based AI testing strategy should be used to determine where testing efforts should be prioritized?

• A. Prioritizing Security and Safety Risks
• B. Analyzing Failure Scenarios
• C. Identifying High-Impact Decisions
• D. Evaluating Misuse and Abuse Cases

An organization maintains centralized repositories that hold AI source code, trained models, and datasets. Its security goals include preventing unauthorized changes, ensuring accountability for modifications, and allowing prompt detection of suspicious activity during development and deployment.
Which repository-security control most directly provides both restricted access and traceable oversight of AI assets?

• A. Automated security checks in CI/CD pipelines
• B. Mandatory static source code reviews
• C. Role-based access control with audit logs
• D. Encryption of models and datasets at rest

As an AI-powered fraud-detection engine nears production deployment, assurance teams verify that it operates correctly under normal transaction patterns. However, risk discussions identify a subtler threat:
malicious actors may deliberately craft transaction inputs that cause the model to approve fraudulent activity without activating conventional failure indicators. This risk would not appear through routine functional or access checks and could directly erode trust in real-time decisioning during live operations.
As the AI Security Assurance Lead, which type of security testing should be used to intentionally assess the system's resistance to this manipulation before release?

• A. Adversarial Testing
• B. Penetration Testing
• C. Access Control Testing
• D. Vulnerability Scanning