An administrator troubleshooting policy configuration finds that two similar high-risk models have been assigned different sets of required questions with no documented reason. What should be reviewed first?
Select an answer to reveal the explanation.
Short Explanation
When two similar high-risk models get different required questions, you need to know whether their actual governance obligations differ or someone mis-mapped the policy and questionnaire. Only real differences in obligations should be the reason for any variation.
Full Explanation
The correct choice is the one that asks whether each model's assigned policy and questionnaire were actually mapped to its specific governance obligations, since real differences in obligations, not oversight, should be the reason for any variation. Variation between similar assets should trace back to genuine differences in their obligations; if it does not, the configuration is likely wrong for one of them and needs to be corrected against what each actually requires. The choice that reviews whether the two models were created in the same calendar quarter is incorrect because creation date has no bearing on governance obligations, which are driven by risk and regulatory context, not timing. The choice that reviews whether the models' names are alphabetically close is incorrect because naming convention is not governance-relevant and should never determine policy assignment. The choice that says nothing should be reviewed because two high-risk models should always receive identical questionnaires by definition is incorrect because it assumes risk tier alone always dictates identical requirements, ignoring that obligations can still differ by jurisdiction, sector, or use case even within the same tier. For the exam, trace unexplained configuration differences back to actual obligations rather than assuming either uniformity or an unrelated cause.