A proof-of-concept chatbot is becoming a governed use case and needs a risk classification. Which factor should most directly raise its risk tier?
Select an answer to reveal the explanation.
Short Explanation
If your chatbot handles sensitive personal data, automates a lot, and reaches a large user population, that's what pushes its risk tier up—not who built it or how polished the front end looks.
Full Explanation
The option stating that the chatbot will process sensitive personal data and operate with a high degree of automation over a large user population is correct. Data sensitivity, automation level, and user population are exactly the dimensions that risk classification is meant to weigh, and this scenario scores high on all three. The option about the underlying model being fine-tuned more recently than competing models is incorrect because fine-tuning recency is not one of the classification criteria and does not indicate risk. The option about a modern, well-reviewed front-end framework is incorrect because front-end framework choice has no bearing on the use case's impact or data handling. The option about a team with several years of AI experience is incorrect because team experience does not change what the use case actually does or who it affects. For the exam, connect risk tier increases to the defined classification dimensions, not to incidental project details.