Appendix C. Exam day guide

Check the reference date. If a question states a reference date, judge it using the laws and documents in force that day. An option based on a committee's pre-amendment name or a revision not yet effective may be wrong.

Underline four things first. Before reading options, mark ① who (AI development business operator, AI utilization business operator or user; personal information controller or entrusted processor), ② which route and plan, ③ what data (sensitive or pseudonymized information), and ④ how outputs are used (internal draft, customer delivery, automated decision).

Focus on verbs. Distinguish "shall" (obligation, for example Article 31), "shall endeavor to" (duty to endeavor, for example Article 35), "may" (discretion), "may be exempted" (exception) and "shall be deemed" (legal deeming). If the option's verb differs from the provision, it is likely wrong.

Common elimination rules.

  1. Options granting exemptions or determining data terms based on payment, company size or brand recognition, where these grounds do not exist in the law or terms, are usually wrong.
  2. Be wary of options combining separate commitments, such as training use and retention, or storage and processing locations.
  3. The AI Basic Act has only three grounds for administrative fines: failure to give prior notice (Article 31(1)), designate a domestic representative, or comply with a suspension or corrective order. Output labeling violations lead to fines only through failure to comply with a corrective order.
  4. High-impact status requires both use in a statutory area and potential significant impact or risk to life, physical safety or fundamental rights. Safety obligations require all three criteria.
  5. "Pseudonymized information is not personal information", "access alone is not a transfer" and "contract-based decisions need no explanation" are recurring traps.
  6. Options claiming supplier certification or frameworks replace the adopting organization's risk assessment are wrong.

Tips by format. Judge multiple-choice options independently; order steps by whether one step's output becomes the next input; and check each statement's conclusion and supporting reason separately. Matching may contain unused choices.

Time management. Sixty minutes for 35 questions gives a little over 1 minute 40 seconds each. Answer questions you are certain of on the first pass, and flag uncertain article numbers or deadlines for the final 15 minutes.

Key point

Immediately before the exam, review only the summary tables in Chapters 1 and 5, transparency, responsibilities and fines tables in Chapter 2, and pseudonymized information and automated decision tables in Chapter 3. Remember that this book's explanations are for study, not legal advice.