Key details for this exam, checked against the published exam outline
Each question shows the correct answer and an explanation of why it is right
An AI project for a financial technology client is at risk due to potential inaccuracies in data aggregation. What is the first step the project manager should take to mitigate the risk?
When an AI initiative faces risk due to potential inaccuracies in data aggregation, PMI-CPMAI--aligned practice says the very first action is to understand the data characteristics before taking any corrective measures. This includes clarifying data sources, aggregation logic, granularity, formats, lineage, and quality dimensions (completeness, consistency, accuracy, timeliness, and validity). By doing so, the project manager and data team can determine where and why aggregation errors are arising, and whether they stem from upstream systems, ETL/ELT pipelines, joining logic, or business rules.
PMI's AI data lifecycle guidance stresses that you cannot reliably ''fix'' freshness, delete records, or visualize results until you have a structured understanding of the data landscape and its transformation steps. Jumping to deletion (option B) can worsen bias or information loss, and focusing only on freshness (option A) or visualization (option D) treats symptoms rather than root cause.
Therefore, the correct first step in mitigating this type of risk is to understand the data characteristics (option C), which then informs targeted remediation actions, improved aggregation logic, and robust data quality controls aligned with the AI solution's objectives and risk appetite.
An organization is planning their digital transformation initiatives by building an AI solution to focus on data-collection needs. The goal is to reduce the manual handling of data.
Which approach should be prioritized to achieve the objective?
In PMI-CP--aligned AI program guidance, when an organization's goal is to reduce manual handling of data, the focus is on automation of data intake, processing, and basic analysis rather than simply scaling storage or outsourcing tasks. The most appropriate strategy is to implement intelligent systems that can autonomously process and analyze data. Such systems may include automated data pipelines, intelligent document processing, and AI-driven extraction and transformation services that remove repetitive manual steps.
Option B directly addresses this by creating an AI solution that can ingest, validate, structure, and summarize data with minimal human intervention. This not only reduces manual workloads but also shortens cycle times, improves consistency, and lowers the risk of human error. Outsourcing data-processing tasks (option A) still relies on human labor, just in another organization, and does not achieve true digital transformation. Enhancing database infrastructure (option C) or upgrading cloud storage (option D) improves capacity and reliability, but does not inherently reduce manual handling---they are enabling technologies, not automation mechanisms.
From an AI management perspective, a transformation initiative should prioritize intelligent automation of the data lifecycle, and that is best captured by implementing systems that autonomously process and analyze data as described in option B.
A project manager is tasked with ensuring that an AI project complies with data regulations before data collection begins. This involves identifying all necessary requirements for trustworthy AI, including ethical considerations, privacy, and transparency.
What should the project manager do first?
For AI projects handling regulated data (such as financial or personal information), PMI-aligned guidance for Managing AI emphasizes that regulatory and compliance requirements must be understood upfront, before data is collected, processed, or shared. The very first step is to perform a comprehensive assessment of data regulations and compliance requirements across all applicable jurisdictions (e.g., privacy laws, banking/financial regulations, sectoral rules, cross-border data transfer constraints, retention rules, and consent requirements).
This assessment provides the foundation for trustworthy AI, because ethical principles, privacy safeguards, transparency mechanisms, and accountability structures must map directly to concrete legal and regulatory obligations. Only when these requirements are clearly identified can the project manager design an appropriate data governance framework, define lawful bases for processing, set access controls, and specify documentation and audit-trail expectations.
Drafting governance (option B), stakeholder meetings (option C), or high-level data collection strategies (option D) are useful later steps, but if they are done before a regulatory and compliance assessment, they risk misalignment with the law and may require costly rework. Therefore, in line with PMI-CPMAI's focus on responsible and compliant AI lifecycle management, the project manager should first perform a comprehensive assessment of data regulations and compliance requirements.
In an IT services firm, the AI project team is tasked with developing a virtual assistant to support customer service operations. The assistant must integrate seamlessly with existing customer relationship management (CRM) systems and handle a variety of customer queries.
Which necessary initial task should the project manager take?
For an AI virtual assistant that must integrate with existing CRM systems and support varied customer queries, PMI-CPMAI--aligned practices emphasize that the initial critical task is understanding and assessing the current data environment. This is best achieved by conducting a comprehensive data audit (option B). A data audit systematically examines what data exists in the CRM and surrounding systems, how it is structured, its quality, completeness, lineage, and how it flows across processes.
This step reveals whether the assistant can access necessary customer profiles, interaction histories, product details, and case records; identifies data gaps; and surfaces integration constraints (such as inconsistent IDs, missing timestamps, or poor-quality notes). The audit also supports decisions on privacy controls and consent management for customer data. Building a data lake (option A) is an architectural choice that should be based on audit findings, not a starting assumption. Designing a custom algorithm (option C) and procuring advanced NLP libraries (option D) are technical implementation activities that come after the project has confirmed that the available data and integrations can support the intended capabilities and compliance obligations. Therefore, the necessary initial task for the project manager is to conduct a comprehensive data audit of the CRM-related landscape.
A development team is tasked with creating an AI system to assist physicians with diagnosing medical conditions. They encountered cases where symptoms do not always lead to well-defined diagnoses.
Which approach should the project manager integrate to handle the inherent uncertainty?
For AI systems supporting high-stakes medical decisions, PMI-CP/CPMAI and responsible AI guidance emphasize human-in-the-loop oversight as the primary way to manage inherent uncertainty and risk. In clinical diagnosis, symptoms are often ambiguous, overlapping across multiple conditions, and influenced by patient history and context. No matter how advanced the model, there will be edge cases, rare diseases, and conflicting signals.
Rather than attempting to eliminate uncertainty purely through more complex models, more input variables, or ever-growing rule sets, best practice is to design the AI as a decision-support tool, not an autonomous decision-maker. That means physicians retain ultimate responsibility, reviewing AI suggestions, over-riding them when clinically necessary, and using their expertise to weigh patient-specific factors the model may not capture.
Human-in-the-loop design also supports explainability and trust: clinicians can question outputs, cross-check with other evidence, and provide feedback that can be used later for model improvement. CPMAI's lifecycle framing for regulated and safety-critical domains is clear: when outcomes materially affect health or life, the appropriate way to handle uncertainty is to keep a human in the loop for all decision-making, which aligns directly with option A.
144 questions covering all exam domains, starting from $20
Exam domains verified against: Official PMI PMI-CPMAI exam guide, last checked August 2026.
Establish governance protocols for data privacy, security, and compliance with regulations like GDPR and CCPA. Create transparent documentation of model selection, data sources, and algorithmic decision-making while implementing bias detection and mitigation throughout development.
Conduct stakeholder interviews to define problems and develop AI solution architectures aligned with business objectives. Evaluate technical feasibility, assess risks including security and ethics, determine ROI, and establish success criteria and KPIs for implementation.
Sample question from this domain above: Q2
Define required data types, volumes, and quality standards for model training while identifying data sources, SMEs, and infrastructure needs. Verify privacy compliance, conduct data quality assessments, and make go/no-go decisions on data readiness for model development.
Oversee algorithm selection, model configuration management, and training processes including hyperparameter tuning and cross-validation. Conduct data preparation and quality verification before approving models for deployment against established performance criteria.
Develop deployment strategies and coordinate system integration with rollback procedures and validation plans. Establish model governance, performance monitoring, and contingency planning while managing the transition from project delivery to operational support and maintenance.
Common questions about the exam itself