// TRAINING QUIZ

Are you ready for training and to scale up in AI?

A practical 12-question diagnostic self-assessment for corporate learners preparing for Quantropic.ai courses in AI Governance, AI Workflow Deployment, Red Teaming with Viper and AI, and integrated corporate AI readiness. Score 1 point per question. Use topic-level results to identify the best starting pathway: governance, workflow deployment, red teaming, or a combined implementation route.

12 QUESTIONS DIFFICULTY 2/5 MULTI-ANSWER

01 AI Governance Starter Kit

Your COO wants to announce a company-wide AI Governance Starter Kit in 30 days. Several teams already use generative AI informally, but there is no inventory, no named risk owners, and no standard approval route. Which starter-kit package is most review-ready for executives and audit?

A slide deck explaining AI benefits, a list of popular AI tools, and a request that employees use good judgment until a fuller policy is written. An AI use-case register with business owners, risk tiers, acceptable-use rules, approval workflow, evidence requirements, exception handling, and executive reporting cadence. A procurement checklist focused only on vendor pricing, contract length, and whether the tool has an enterprise license. A technical model evaluation template owned by IT, with no business ownership or operational policy requirements.

This tests whether the learner can distinguish an audit-ready governance starter kit from informal AI guidance. The correct answer combines ownership, risk classification, acceptable use, approvals, evidence, exceptions, and executive reporting, which are necessary for review and rollout. Wrong answers indicate a gap in understanding that governance is an operating system for decisions and accountability, not just awareness material, procurement review, or technical testing.

02 AI Governance Starter Kit

A sales manager wants approval to use an external AI tool to summarise customer call notes. The notes may include client names, contract issues, pricing concerns, and unresolved complaints. What should the governance lead do first?

Approve the use case immediately because summarisation is a low-complexity workflow and sales productivity is a clear business benefit. Ask the sales team to remove only the most sensitive details manually and proceed without further review. Classify the data and use case, assign a business risk owner, check acceptable-use and privacy controls, and route the request through the approved workflow before use. Reject all AI summarisation of customer information permanently because customer data can never be used in any AI-assisted workflow.

This tests practical governance triage for a real business use case. The correct answer balances productivity with data classification, ownership, privacy, acceptable use, and approval controls. Wrong answers reveal either over-permissive adoption, weak privacy controls, or overly broad blocking that prevents responsible AI adoption.

03 AI Governance Starter Kit

Your executive sponsor asks for a monthly AI governance report that will help them decide whether AI adoption is controlled enough to expand. Which items should be included? Select all that apply.

Approved and pending AI use cases, mapped to owners, risk tier, approval status, and business area. Known policy exceptions, incidents, unresolved risks, and remediation progress. Adoption and training metrics that show whether employees understand approved AI use and escalation routes. Only a list of the most impressive AI outputs produced that month, without risk or control information.

This tests executive reporting competence. The correct items provide decision-ready visibility into adoption, ownership, risk, exceptions, incidents, and remediation. The wrong answer suggests a communications-focused approach that may impress stakeholders but does not support oversight, audit readiness, or responsible expansion.

04 AI Workflow Deployment

A department wants its first internal AI Copilot workflow inside Outlook and Teams. Candidate workflows include confidential contract negotiation, routine meeting-summary drafting, automated performance reviews, and finance approval routing. Which first pilot is most appropriate for a safe deployment?

Routine meeting-summary drafting for internal project meetings, with clear data boundaries, user review before sending, and feedback capture. Confidential contract negotiation, because it has the highest business value and therefore should be automated first. Automated performance reviews, because HR teams already use templates and the workflow is repetitive. Fully automated finance approval routing with no human review, because approvals are already rule-based.

This tests workflow selection for a first AI deployment. The correct answer chooses a high-volume, lower-risk workflow with human review and bounded data. Wrong answers indicate a tendency to start with sensitive, high-impact, or fully automated workflows before controls, user trust, and operational monitoring are mature.

05 AI Workflow Deployment

A team is configuring an Outlook and Teams Copilot extension to draft client emails from internal notes. Which control is most important before broad deployment?

A human-in-the-loop review step that requires the employee to verify accuracy, tone, recipients, and sensitive content before sending. A setting that makes AI-generated drafts send automatically whenever the model confidence score appears high. A rule that stores all prompts and outputs in an unmanaged shared folder so anyone can learn from prior examples. A launch message telling staff that the Copilot is approved, with no workflow-specific training required.

This tests safe operational deployment of AI-assisted communication. The correct answer keeps accountability with the employee and reduces risks involving accuracy, tone, disclosure, and misdirected communication. Wrong answers show gaps in human review, data handling, deployment controls, and adoption planning.

06 AI Workflow Deployment

After an internal AI Copilot goes live, employees report that summaries are useful but sometimes omit important approval conditions. Managers are still copying summaries into decision records without checking them. What is the best next step?

Disable the Copilot permanently because any missed condition proves the workflow is unsafe. Add review prompts and required confirmation fields for approval conditions, retrain users on decision-record responsibilities, and monitor error patterns before expanding use. Tell users to write longer prompts and continue using the workflow as-is because the issue is user behavior, not deployment design. Allow only managers to use the Copilot, since senior staff do not need structured review steps.

This tests post-deployment governance of workflow quality and human accountability. The correct answer improves the workflow, reinforces user responsibility, and uses monitoring before scale-up. Wrong answers indicate either unnecessary abandonment, over-reliance on users without design fixes, or misplaced trust in seniority instead of controls.

07 Red Teaming with Viper and AI

Your security lead proposes using Viper and AI to assess risks in a newly approved internal AI workflow. Which planning elements are required for a safe, corporate red-team exercise? Select all that apply.

Written permission, named business and technical owners, defined scope, approved timing, and clear stop conditions. A reporting and remediation process that classifies findings by business impact and assigns owners for follow-up. Agreement that testing will remain defensive, documented, and limited to approved systems and scenarios. Freedom for testers to explore any connected system if they believe it may reveal useful weaknesses.

This tests safe red-team planning readiness. The correct answers establish permission, scope, ownership, defensive intent, reporting, and remediation. The wrong answer indicates a serious governance gap: unsanctioned expansion of testing can create legal, operational, and trust risks.

08 Red Teaming with Viper and AI

A red-team exercise identifies that employees may paste restricted internal documents into an AI workflow that was approved only for general business content. What is the best way to classify and report the finding?

Treat it as a user training issue only and avoid reporting it as a system risk. Report it as a governance and workflow-control risk, describe the business impact, identify the affected workflow, assign remediation owners, and recommend control improvements. Publish examples of the restricted documents in the red-team report so executives can see exactly what was exposed. Close the finding if no confirmed external disclosure has occurred.

This tests vulnerability awareness and risk reporting without unsafe detail. The correct answer frames the issue as a control and governance gap tied to business impact and remediation. Wrong answers reveal gaps such as blaming users only, mishandling sensitive evidence, or underestimating near-miss risks.

09 Red Teaming with Viper and AI

A senior manager asks the red-team group to include a vendor platform in next week's Viper and AI assessment because the vendor is connected to an internal workflow. The contract does not mention red-team testing. What should the team do?

Include the vendor platform because it is connected to an approved internal workflow and therefore falls within the same scope. Limit testing to the already approved internal scope and escalate vendor testing for legal, procurement, vendor, and security approval before any assessment. Ask an individual vendor support contact for informal permission by email and proceed if they seem comfortable. Exclude all vendor-related risks from the final report because they cannot be tested immediately.

This tests permission boundaries and third-party risk judgment. The correct answer protects the organization by respecting scope, contracts, and approval channels while still escalating the risk. Wrong answers show risky assumptions about connected systems, informal authorization, or incomplete reporting.

10 Integrated Corporate AI Readiness

A learner scores strongly on workflow deployment but poorly on governance. Their business unit wants to deploy an Outlook and Teams Copilot for approval routing within six weeks. What is the best Quantropic.ai starting pathway?

Start with AI Workflow Deployment only, because their strongest area should set the training path. Start with AI Governance Starter Kit, then move into AI Workflow Deployment with the approval workflow mapped to policy controls and risk owners. Start with Red Teaming with Viper and AI, because every deployment should begin with adversarial simulation. Skip training and proceed to implementation because the timeline is short.

This tests pathway selection based on diagnostic gaps. The correct answer follows the rule that if governance is the lowest score, governance should come first, especially before approval routing. Wrong answers indicate over-weighting existing strengths, sequencing red teaming before basic governance, or letting urgency override readiness.

11 Integrated Corporate AI Readiness

Your company is preparing a combined AI rollout: an acceptable-use policy, an internal Copilot pilot, and a defensive red-team assessment. Which sequencing is most operationally sound?

Launch the Copilot broadly, then write the policy and perform red-team review only if users report problems. Define governance scope and ownership, run a controlled Copilot pilot with human review and data boundaries, then perform permission-based red-team assessment and remediation before expansion. Complete red-team testing first on all possible systems, then decide whether governance is necessary. Publish the acceptable-use policy and assume that policy compliance is enough to deploy without pilot testing or remediation tracking.

This tests integrated rollout sequencing. The correct answer connects governance, controlled deployment, defensive testing, and remediation before scale. Wrong answers reveal gaps such as reactive governance, overbroad testing, or assuming policy alone controls operational risk.

12 Integrated Corporate AI Readiness

A department has balanced but low scores across governance, workflow deployment, and red-team readiness. Leaders are enthusiastic but lack a use-case inventory, approved controls, pilot criteria, or remediation process. What recommendation best fits the diagnostic result?

Begin with AI Governance Starter Kit to establish ownership, acceptable use, approval workflows, and reporting before selecting deployment or red-team priorities. Begin with the most exciting workflow automation idea to build momentum, then backfill governance artifacts later. Begin with Red Teaming with Viper and AI to discover all risks before any governance decisions are made. Move directly to an executive rollout workshop because balanced scores show consistent readiness.

This tests interpretation of balanced low readiness. The correct answer follows the diagnostic matrix: if all scores are balanced but low, start with AI Governance Starter Kit to create the operating foundation. Wrong answers indicate confusing enthusiasm or consistency with readiness, and sequencing advanced activities before basic controls.