AIGP Practice Exam 2026: 10 Sample Questions + Strategy

Practice questions only help if they look like the real exam and if you review them properly. This page gives you ten AIGP-style questions, one or more from every domain, and explains how to turn practice results into a study plan.

Ten AIGP practice questions (BoK v2.1)

These are original questions written by Archuz for practice. They are not IAPP exam items.

1. Domain I – Roles

An HR software company builds an AI tool that ranks job candidates and sells it to employers in the EU. A retailer licenses it to screen applicants. Who is the provider under the EU AI Act?

1. The retailer
2. The HR software company
3. Both equally
4. Neither, because recruitment tools aren't regulated

Answer: B. The developer that places the system on the market under its own name is the provider. The retailer is a deployer. Recruitment AI is an Annex III high-risk use, so D is wrong.

2. Domain I – AI concepts

A model performs well in testing but its accuracy declines over the following months as customer behaviour changes. What is this called?

1. Overfitting
2. Data drift
3. Hallucination
4. Model inversion

Answer: B. Changes in the input data distribution after deployment (data or concept drift) degrade performance. That's why post-deployment monitoring is a core governance control.

3. Domain II – EU AI Act

Which of these is a prohibited AI practice under Article 5 of the EU AI Act?

1. A chatbot that answers customer questions
2. AI that infers employees' emotions in the workplace, other than for medical or safety reasons
3. A credit-scoring system
4. A spam filter

Answer: B. Emotion recognition in workplaces and education is prohibited, except for medical or safety reasons. Credit scoring (C) is high-risk, not prohibited. Chatbots (A) carry transparency duties.

4. Domain II – Frameworks

An organisation wants a certifiable management system for its AI activities. Which standard fits best?

1. NIST AI RMF
2. ISO/IEC 42001
3. ISO/IEC 42005
4. OECD AI Principles

Answer: B. ISO/IEC 42001 is a certifiable AI management system standard. The NIST AI RMF is a voluntary framework, ISO/IEC 42005 gives guidance on AI system impact assessment, and the OECD Principles are high-level policy principles.

5. Domain II – Other AI laws (multi-select)

Which TWO statements about AI-specific laws outside the EU are accurate?

1. South Korea has adopted a framework AI law, the AI Basic Act
2. No US state has passed AI-specific legislation
3. New York City requires bias audits for certain automated employment decision tools
4. China has no rules on generative AI

Answer: A and C. South Korea's AI Basic Act took effect in January 2026, and NYC Local Law 144 requires bias audits for automated employment decision tools. Several US states have AI laws, and China regulates generative AI services.

6. Domain III – Data governance

A team wants to use customer support transcripts to fine-tune a model. What should governance require first?

1. Fine-tune immediately, then assess
2. Confirm a lawful basis and purpose compatibility, and minimise or de-identify personal data
3. Delete all transcripts
4. Publish the dataset for transparency

Answer: B. Reusing personal data for training raises purpose-limitation and lawful-basis questions. Assessment and minimisation come before use.

7. Domain III – Testing

Before releasing a generative AI feature, which activity best finds ways users might bypass safety controls?

1. Unit testing
2. Red teaming
3. Load testing
4. A/B testing

Answer: B. Red teaming is adversarial testing designed to find failures such as jailbreaks, prompt injection and harmful outputs. See what AI red teaming is.

8. Domain IV – Procurement

A company is buying an AI model from a vendor. Which contract term most directly supports ongoing governance?

1. A volume discount
2. An obligation for the vendor to notify the customer of material model changes
3. A logo-use clause
4. A longer payment term

Answer: B. Model updates can change risk. Notification lets the deployer re-test and reassess.

9. Domain IV – Human oversight

Reviewers approve 99% of an AI system's loan-denial recommendations within seconds. What risk does this most suggest?

1. Automation bias undermining meaningful human oversight
2. Model overfitting
3. Data poisoning
4. Excessive transparency

Answer: A. Oversight only works if reviewers can and do challenge outputs. Rubber-stamping is a governance failure.

10. Domain IV – Agentic AI (new in v2.1)

An AI agent can send emails and issue refunds on behalf of customer service staff. Which control is most important?

1. Giving the agent broad administrative access so it can resolve any issue
2. Limiting its permissions and requiring human approval above a defined refund threshold
3. Turning off logging to protect privacy
4. Letting the agent update its own instructions

Answer: B. Least privilege and human approval gates for high-impact actions are core agentic AI controls. Logging should be kept for accountability.

How to use AIGP practice exams properly

1. Start with a short diagnostic (30–40 questions) before you study, so you can see where you stand by domain.
2. Practise by domain while you learn, in sets of 20–30. Review every question, including the ones you got right by guessing.
3. Keep an error log. For each miss, record the domain, the concept and the reason: knowledge gap, misread stem, or a distractor that fooled you.
4. Take a full 100-question mock about 2–3 weeks out, under real timing and with the break.
5. Retarget your weakest two competencies, then take a second mock or a large fresh set in the final week.

Interpreting your practice scores

These bands are Archuz guidance, not IAPP thresholds. They also depend on how realistic your question source is.

For how to combine a question bank with full mocks, see question bank vs practice exam. For the question types, see the AIGP exam format.

A full-mock routine that builds exam fitness

1. Book a three-hour block with no interruptions, at the same time of day as your real exam.
2. Use exam conditions: no notes, no pausing, a 15-minute break at the halfway point.
3. Use checkpoints: about 50 questions by 80 minutes.
4. Mark your confidence on each answer (sure, unsure, guess) so you can see whether your guesses are good.
5. Review the same day or the next: every wrong answer and every guess, with the reason recorded.
6. Re-weight your plan using your domain scores.

Two full mocks are usually enough: one about two to three weeks before the exam, one about a week before.

Frequently asked questions

Sources

1. IAPP Store: AIGP Exam
2. IAPP: AIGP Body of Knowledge
3. Regulation (EU) 2024/1689 (EU AI Act), EUR-Lex
4. ISO/IEC 42001:2023

Last reviewed: October 2026. Sample questions are original Archuz practice items, not IAPP exam content.