Independent AAISM™ credential training … that does not waste your time.

Correct: B. Insurance is a financial instrument — it transfers monetary impact of a covered loss. It does not transfer the organization's legal accountability to regulators, its governance obligations to demonstrate corrective action, or its reputational standing with customers. The deploying organization remains the accountable party. Per OECD AI Principles (2024), Principle 5 (accountability): insurance transfers financial impact only; legal, regulatory, and reputational accountability remain with the deploying organization.

Correct: B. Determining whether a particular record was in the training set is the definition of membership inference — and membership itself is sensitive when the dataset is, for example, individuals with a genetic condition. Inversion reconstructs record contents; extraction replicates the model; evasion seeks misclassification. Per MITRE ATLAS (membership inference): learning whether a specific record was in the training set is membership inference, distinct from inversion, extraction, and evasion.

Correct: C. The requirement is to know which fields are sensitive and bind enforceable usage rules to that knowledge — the definition of data classification with policy enforcement. Quality profiling measures fitness, lineage shows where data went after the fact, and retention controls how long it exists; none prevents prohibited use at selection time. Per ISO/IEC 27001 (information classification): binding enforceable usage rules to sensitivity labels is data classification, distinct from quality, lineage, or retention controls.