EU AI Act Overview for Security Teams

1. Which of the following would be classified as a high-risk AI system?

Email spam filtering

Recruitment screening based on CV analysis

Weather forecasting

Product recommendation engines

2. What is the key difference between Notified Bodies and Designated Authorities in EU AI Act enforcement?

No difference exists

Notified Bodies conduct third-party conformity assessments; Designated Authorities oversee compliance

Only Designated Authorities are involved

Notified Bodies replace government oversight

3. True or False: The EU AI Act requires continuous monitoring of high-risk AI systems after deployment.

True

False

4. Which AI use case would fall under the prohibited category in the EU AI Act?

AI for medical diagnosis

AI for analyzing financial transactions

AI for manipulating behavior without consent

AI for manufacturing automation

5. What is the primary penalty for non-compliance with the EU AI Act?

Written warning only

Fines up to 6% of global annual turnover

Product recall without penalties

No penalties apply

6. True or False: Minimal-risk AI systems require no compliance documentation under the EU AI Act.

True

False

7. Which stakeholder group must be involved in the governance of high-risk AI systems?

Only developers

Only government agencies

Multiple parties including users and affected individuals

No external stakeholders

8. What is the purpose of the Innovation Sandbox provisions in the EU AI Act?

To ban innovative AI systems

To allow controlled testing of AI in a regulatory environment

To eliminate compliance requirements

To prevent AI startups from operating

9. True or False: The EU AI Act allows member states complete freedom to regulate AI independently.

True

False

10. What must organizations provide for high-risk AI systems before deployment?

Marketing materials only

Technical documentation and risk assessment

CEO approval

Social media announcements

11. What is the primary purpose of the EU AI Act?

To ban all artificial intelligence systems

To establish a risk-based regulatory framework for AI systems

To accelerate AI development without restrictions

To replace national data protection laws

12. What is required for AI systems that create synthetic media (deepfakes)?

No special requirements

Clear disclosure that content is AI-generated

Automatic removal from platforms

Government approval only

13. True or False: Transparency obligations apply equally to all AI risk categories.

True

False

14. Which authority is responsible for enforcing the EU AI Act at the member state level?

National AI Agencies

Market Surveillance Authorities

European Central Bank

NATO Cybersecurity Division

15. What is the primary role of a Conformity Assessment in the EU AI Act?

To verify AI systems meet legal requirements

To eliminate all AI risks

To replace security audits

To guarantee AI system profitability

16. True or False: The EU AI Act applies only to AI systems developed within the European Union.

True

False

17. Which of the following is a requirement for high-risk AI systems?

No documentation needed

Risk assessment and mitigation strategies

Immediate discontinuation

Transparency statements only

18. What type of AI applications are explicitly prohibited under the EU AI Act?

All AI systems in healthcare

Social scoring and manipulation techniques

AI used for customer service

AI for data analysis only

19. Biometric identification systems used for law enforcement fall under which risk classification?

Minimal risk

Low risk

High risk

Prohibited risk

20. Which risk category in the EU AI Act poses the highest regulatory burden?

Minimal risk

Low risk

High risk

Unacceptable risk

SecAI+ EU AI Act Overview for Security Teams Quiz

1. Which of the following would be classified as a high-risk AI system?

2.

What first name or nickname would you like us to use?

2. What is the key difference between Notified Bodies and Designated Authorities in EU AI Act enforcement?

3. True or False: The EU AI Act requires continuous monitoring of high-risk AI systems after deployment.

4. Which AI use case would fall under the prohibited category in the EU AI Act?

5. What is the primary penalty for non-compliance with the EU AI Act?

6. True or False: Minimal-risk AI systems require no compliance documentation under the EU AI Act.

7. Which stakeholder group must be involved in the governance of high-risk AI systems?

8. What is the purpose of the Innovation Sandbox provisions in the EU AI Act?

9. True or False: The EU AI Act allows member states complete freedom to regulate AI independently.

10. What must organizations provide for high-risk AI systems before deployment?

11. What is the primary purpose of the EU AI Act?

12. What is required for AI systems that create synthetic media (deepfakes)?

13. True or False: Transparency obligations apply equally to all AI risk categories.

14. Which authority is responsible for enforcing the EU AI Act at the member state level?

15. What is the primary role of a Conformity Assessment in the EU AI Act?

16. True or False: The EU AI Act applies only to AI systems developed within the European Union.

17. Which of the following is a requirement for high-risk AI systems?

18. What type of AI applications are explicitly prohibited under the EU AI Act?

19. Biometric identification systems used for law enforcement fall under which risk classification?

20. Which risk category in the EU AI Act poses the highest regulatory burden?