IAPP AIGP: Artificial Intelligence Governance Professional - Practice Questions – Practice Quiz Collection

Master the complete Body of Knowledge for the IAPP Certified Artificial Intelligence Governance Professional (AIGP) credential. This comprehensive curriculum on Synapticz organizes 5 Domains, 21 Subtopic QuizBooks, 97 Microlearning QuestionSets, and 970 rigorous practice questions into a structured, scenario-driven learning path designed for legal, privacy, compliance, engineering, and risk professionals.

Every questionset combines single-select and multi-select questions calibrated across four progressive cognitive tiers—moving from foundational AI terminology and machine learning architectures to complex, multi-jurisdictional regulatory compliance trade-offs, technical red-teaming, and post-market incident adjudication. Detailed worked explanations cite exact statutory articles, framework subcategories, and management system clauses while explaining why every distractor fails.

Core Regulatory & Technical Frameworks Covered

The AIGP examination tests practical governance judgement across intersecting global laws, voluntary risk frameworks, and technical lifecycle standards. This collection builds deep operational fluency in:

European Union AI Act (Regulation (EU) 2024/1689): Extraterritorial scope (Article 2), operator roles and value-chain transitions (provider, deployer, importer, distributor under Articles 25–27), prohibited AI practices (Article 5), high-risk classifications (Article 6, Annex I safety components & Annex III standalone systems), mandatory high-risk controls (Articles 9–15), General-Purpose AI (GPAI) and systemic risk obligations (Articles 51–55), transparency rules (Article 50), conformity assessment, CE marking, serious incident reporting (Article 73), and penalty tiers (Article 99).
NIST AI Risk Management Framework (AI RMF 1.0 & NIST AI 600-1): Operationalizing the four Core Functions—GOVERN, MAP, MEASURE, and MANAGE—alongside the seven characteristics of Trustworthy AI and the 12 risk profiles of the NIST Generative AI Profile (confabulation, prompt injection, CBRN, synthetic content integrity, and value-chain risks).
ISO/IEC 42001:2023 (Artificial Intelligence Management System — AIMS): Implementing an auditable Plan-Do-Check-Act (PDCA) management system across Clauses 4–10, Statement of Applicability (SoA), AI System Impact Assessments, third-party supplier controls (Clause 8.4), and Annex A governance controls (together with ISO/IEC 22989, 23894, 24027, 24028, and 5259).
Global Privacy & Data Protection Intersections (GDPR & State Privacy Laws): Lawful bases for AI training and inference (Article 6), special category biometric and health data rules (Article 9), transparency and data subject rights in latent model weights (Articles 12–21), automated decision-making and profiling safeguards (Article 22), Data Protection by Design (Article 25), Data Protection Impact Assessments (Article 35), and Privacy-Enhancing Technologies (differential privacy, federated learning, homomorphic encryption, synthetic data).
US Sectoral Laws, Enforcement & Global Principles: OECD AI Principles (2024), UNESCO Ethics Recommendation, G7 Hiroshima Process, US Executive Order 14110 & OMB M-24-10, FTC Section 5 unfair/deceptive enforcement and algorithmic disgorgement, EEOC Title VII disparate impact and the four-fifths rule, NYC Local Law 144 bias audits, CFPB Circular 2022-03 adverse action notices, FDA Software as a Medical Device (SaMD) & Predetermined Change Control Plans (PCCP), Federal Reserve SR 11-7 Model Risk Management, Illinois BIPA, EU DSM Directive TDM copyright rules, and C2PA content provenance.

Curriculum Architecture & Official Exam Blueprint

The collection mirrors the official IAPP AIGP Body of Knowledge and Exam Blueprint across five structured parts:

Domain QuizBook	Subtopics	QuestionSets	Blueprint Weight	Core Governance Competencies
Domain I: Foundations of AI Governance	5 Sub-Books (1.1–1.5)	22 Sets (220 Qs)	16%–20%	AI/ML taxonomy, neural networks, transformers, RAG, agentic AI, individual & societal harms, trustworthy AI principles, RACI governance boards, and lifecycle risk policies.
Domain II: Laws, Standards & Frameworks	4 Sub-Books (2.1–2.4)	25 Sets (250 Qs)	19%–23%	GDPR & privacy engineering for AI, IP/copyright, employment & consumer protection laws, deep dive into the EU AI Act, ISO/IEC 42001, and NIST AI RMF 1.0.
Domain III: Governing AI Development	5 Sub-Books (3.1–3.5)	20 Sets (200 Qs)	21%–25%	Problem formulation, build-vs-buy trade-offs, data provenance, datasheets, pre/in/post-processing bias mitigation, DP-SGD, RLHF alignment, adversarial red-teaming (MITRE ATLAS / OWASP LLM Top 10), and release readiness gates.
Domain IV: Governing AI Deployment & Use	5 Sub-Books (4.1–4.5)	22 Sets (220 Qs)	21%–25%	Human oversight topologies (HITL, HOTL, HIC), mitigating automation bias, Algorithmic & Fundamental Rights Impact Assessments (AIA/FRIA), vendor due diligence & SLAs, runtime guardrails, drift monitoring (PSI, KL divergence), kill-switch protocols, and mandatory incident reporting.
Domain V: Cross-Domain Scenarios & Full Mock Exams	2 Sub-Books (5.1–5.2)	8 Sets (80 Qs)	Capstone Synthesis	Complex industry case studies (retail banking LLM copilots, automated HR recruitment, clinical diagnostic SaMD, retail biometric surveillance, legal open-weights fine-tuning) and three full-spectrum practice exam simulations (Forms Alpha, Beta & Gamma).

Progressive Four-Tier Cognitive Design

Rather than testing rote memorization alone, every questionset is engineered across four cognitive difficulty levels to build exam-ready analytical judgement:

Tier 1 — Foundational Literacy & Conceptual Recall: Precise definitions, technical model classifications, regulatory acronyms, and core framework architectures.
Tier 2 — Methodological Fluency & Regulatory Mapping: Applying statutory articles to concrete system profiles, calculating disparate impact ratios and drift metrics, and selecting compliant lifecycle documentation.
Tier 3 — Scenario-Based Analysis & Cross-Functional Trade-Offs: Multi-variable case studies balancing competing requirements (such as diagnostic sensitivity vs. explainability, demographic parity vs. equal opportunity, or upstream vs. downstream liability).
Tier 4 — Strategic Synthesis, Audit & Incident Adjudication: Root-cause forensic post-mortems, multi-jurisdictional breach notification timelines (EU AI Act Art. 73, GDPR Art. 33, SEC Form 8-K), algorithmic disgorgement, and end-to-end AIMS certification audits.

Who This Collection Is For

This curriculum is built for privacy officers (DPOs), AI governance leads, corporate and technology attorneys, risk and compliance managers, cybersecurity architects (CISOs), data scientists, and ML engineers preparing for the IAPP AIGP certification or designing enterprise AI governance programs in regulated industries.

Recommended 4-Step Study Routine

Build Foundational & Regulatory Mastery (Domains I & II): Work through Sub-QuizBooks 1.1–2.4 to solidify technical AI concepts, EU AI Act risk classification rules, GDPR Article 22 safeguards, and NIST/ISO framework structures.
Operationalize Lifecycle Controls (Domains III & IV): Complete Sub-QuizBooks 3.1–4.5 to master development gates, dataset governance, fairness metrics, third-party vendor procurement contracts, runtime guardrails, and post-market drift monitoring.
Synthesize Multi-Domain Case Studies (Sub-QuizBook 5.1): Test your ability to spot overlapping legal and technical issues across banking, HR, healthcare, retail surveillance, and enterprise legal analytics scenarios.
Benchmark Exam Readiness (Sub-QuizBook 5.2): Complete the Capstone Practice Exam Simulations (Forms Alpha, Beta, and Gamma), carefully reviewing the worked rationale for every correct answer and distractor.

Browse the nested Domain and Subtopic QuizBooks below to start practicing, track your completion progress, and master AI governance.