Home › Practice Questions
592 questions and 335 flashcards across 10 exams, free in your browser. No signup, no email, no payment.
QUICK TAKEAWAYS
The IAPP's AI Governance Professional exam. The credential most often named in AI governance postings right now, covering how AI systems get governed across their lifecycle.
Covers: AI foundations, responsible AI development, current laws affecting AI, and how AI risk is governed across the lifecycle.
ISACA's enterprise IT governance certification, aimed at people who set governance frameworks rather than operate controls.
Covers: governance framework design, strategic alignment, benefits realization, risk optimization, and resource management.
Certified in Healthcare Compliance. HIPAA, the Stark Law, the Anti-Kickback Statute, and how a hospital compliance program actually runs.
Covers: HIPAA privacy and security, the Stark Law, the Anti-Kickback Statute, billing compliance, and running a hospital compliance program.
The IAPP's privacy program management credential. Less about privacy law, more about running the privacy function day to day.
Covers: building a privacy program, governance and reporting structures, privacy operations, metrics, and responding to incidents.
Certified Authorization Professional. Risk management framework work, security authorisation, and continuous monitoring for federal systems.
Covers: the risk management framework, categorizing systems, selecting and assessing controls, authorisation, and continuous monitoring.
The EU's risk-tiered AI regulation. Prohibited practices, high-risk obligations, and who carries which duty along the value chain.
Covers: prohibited practices, high-risk classification, obligations along the value chain, transparency duties, general-purpose AI, and enforcement.
Financial Risk Manager. Quantitative market, credit and operational risk, aimed at the banking and capital markets side of GRC.
Covers: market risk, credit risk, operational risk, quantitative analysis, and valuation and risk models.
GIAC Security Essentials. Hands-on security fundamentals: networking, cryptography, access control and incident handling.
Covers: networking and protocols, cryptography, access control, defensive architecture, incident handling, and Windows and Linux security.
The US voluntary framework built on Govern, Map, Measure and Manage. Widely referenced in federal and contractor postings.
Covers: the four core functions: Govern, Map, Measure and Manage.
The first certifiable AI management system standard. If your employer is chasing an AIMS certificate, this is the structure the auditor will hold them to.
Covers: AIMS fundamentals, clauses 4 to 10, Annex A controls, risk and impact assessment, roles and lifecycle, and the standards landscape.
Studying because you want the job, not the badge? The point of a certification is the role it opens. Browse every open GRC and AI governance job, or set a free alert and we will email you when a matching one posts.
Yes. All 592 questions and 335 flashcards run in your browser with no signup, no email, and no payment. We build them because people who study for these exams are the people we want on the job board.
592 multiple-choice questions and 335 flashcards across 10 exams. Each game holds between 40 and 72 questions, split across that exam's real domain structure.
No, and be careful of anyone who says otherwise. Real exam items are copyrighted and under NDA. These are original questions written against each exam's published outline, which is what a legitimate practice bank does.
AIGP, CGEIT, CHC, CIPM, CPA (ISC2), EU AI Act, FRM, GSEC, NIST AI RMF, ISO/IEC 42001.
No. Nothing is stored on our servers. Your score lives in your own browser and disappears when you clear it.
Each bank names the version of the standard or exam outline it was written against, shown on every game. Where a standard has a dated edition, such as ISO/IEC 42001:2023, that edition is stated.
No practice bank can promise that. Use these to find the domains where you are weak, then study those domains properly in the official material. That is what they are good for.
The quiz is timed multiple choice and is closer to exam conditions. Flashcards are untimed recall, which is better early on when you are still learning vocabulary.
They help, but they are not the whole story. Certifications appear often in GRC postings and several show up in the job counts beside each game above. Experience with real controls and audits still carries more weight than any credential.
Yes. Share the link. There is nothing to install and no seat limit. Several employers use them for internal upskilling before paying for formal training.
Looking for the wider library? The certification academy pairs each game with its written study companion and the career tools.
