Certified Responsible AI Governance & Ethics (C|RAGE)

Last checked October 22, 2026 against the official EC-Council exam page.

1. Question 1AI Technology Ecosystem and Ethical Considerations

   Which statement best describes the difference between artificial intelligence and machine learning?

   1. AMachine learning is a subset of AI in which systems learn patterns from data rather than following only fixed rules
   2. BMachine learning is a rule-based system that replaces AI by listing every decision in advance
   3. CArtificial intelligence is a hardware component that is installed in servers to speed up computation
   4. DMachine learning and artificial intelligence are unrelated fields that share only a name in common
   Show answer and explanationHide answer

   Correct answer: A

   Machine learning is a subset of AI that learns patterns from data rather than relying only on explicit rules. The other statements reverse or misstate the relationship.

2. Question 2AI Strategy and Governance

   Which element is essential when an organisation first sets its AI governance structure?

   1. AA governance structure that changes weekly so that it can respond to every new trend
   2. BA single engineer who holds all of the decisions about every AI system in the company
   3. CAn informal agreement that teams will raise problems in the corridor when they occur
   4. DClear roles and decision rights for approving, monitoring and retiring AI systems
   Show answer and explanationHide answer

   Correct answer: D

   Clear roles and decision rights for the full AI lifecycle make governance effective. A single decision-maker, informal agreements and constantly changing structures each leave gaps.

3. Question 3AI Compliance, Legal Frameworks and Vendor Compliance

   Which regulation takes a risk-based approach to AI, classifying systems by their risk level and imposing obligations accordingly?

   1. AThe Fair Packaging and Labeling Act, which governs the labels placed on consumer products in the US
   2. BThe Sarbanes-Oxley Act, which governs financial reporting controls for public companies in the US
   3. CThe Payment Card Industry Data Security Standard, which governs the handling of card payment data
   4. DThe EU AI Act, which classifies AI systems by risk and sets obligations by risk tier
   Show answer and explanationHide answer

   Correct answer: D

   The EU AI Act uses a risk-based classification with obligations that depend on the risk tier. The other regulations and standards govern different subjects.

4. Question 4AI Technology Ecosystem and Ethical Considerations

   Which ethical principle requires that people be told when they are interacting with an AI system or when an AI system makes a decision about them?

   1. AEfficiency, which requires the system to produce each output using the fewest computing resources
   2. BTransparency, which requires disclosure of AI use and its basis for decisions
   3. CScalability, which requires the system to support a growing number of users over time
   4. DPortability, which requires the model to be moved between cloud providers without changes
   Show answer and explanationHide answer

   Correct answer: B

   Transparency requires disclosure of AI use and the basis of decisions affecting people. Efficiency, scalability and portability are engineering qualities rather than ethical disclosure duties.

5. Question 5AI Strategy and Governance

   Which governance artefact records the decision to approve an AI system for deployment, including the risks accepted and the conditions attached?

   1. AA holiday calendar that lists the dates on which the governance committee will not meet
   2. BA marketing brief that describes the features of the AI product for the next launch campaign
   3. CAn approval record that documents the risk acceptance, conditions and the accountable approver
   4. DA list of desk assignments for the teams that are working on the AI project this quarter
   Show answer and explanationHide answer

   Correct answer: C

   An approval record documents the decision, the risks accepted, the conditions and the accountable approver, which makes governance auditable. The other artefacts are unrelated to approval.