Quality Assurance & Compliance Flashcards
7 cards from real CAP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Quality Assurance & Compliance flashcards as text
An analytics vendor delivers a model trained on data the client suspects includes records obtained without consent. What should the CAP professional recommend?
Answer: Verify data provenance and consent status before accepting the model
Professionals must confirm data was lawfully and ethically sourced before using models built on it.
What distinguishes model validation from model verification in an analytics quality framework?
Answer: Validation checks the model solves the right business problem; verification checks it was built correctly to specification
Validation asks 'did we build the right model?' while verification asks 'did we build the model right?'
A healthcare analytics project involves protected health information. Which safeguard is most directly required to maintain compliance during analysis?
Answer: De-identifying or limiting access to patient data per applicable privacy regulations
Health privacy regulations require de-identification or strict access controls when handling protected health information.
A stakeholder pressures an analyst to remove outliers until the model supports a predetermined conclusion. What quality and ethics principle does complying violate?
Answer: Objectivity and integrity of the analytical process
Manipulating data to reach a predetermined conclusion violates analytical objectivity and professional integrity.
Which element should a formal model risk assessment include before an analytics model is approved for production?
Answer: Potential impacts of model errors and the severity of wrong decisions
Risk assessments evaluate the consequences and likelihood of model errors to determine appropriate controls.
During a peer review of an analytics deliverable, the reviewer's primary responsibility is to:
Answer: Independently assess the soundness of methods, assumptions, and conclusions
Peer review provides an independent check on methodology, assumptions, and whether conclusions follow from the evidence.
A company plans to transfer customer data from the EU to servers in another country for analysis. What compliance mechanism is most relevant?
Answer: Ensuring an approved cross-border data transfer mechanism is in place under GDPR
GDPR restricts international transfers of personal data unless an approved mechanism such as adequacy or standard contractual clauses applies.