1. The “Eight diligence gates” group gates 5–6 under which theme?

2. What was the outcome of EEOC v. iTutor Group, Inc., et al.?

3. Under “Audit, evidence and regulatory cooperation,” what must the supplier secure from material subcontractors?

4. Which four questions does the masterclass propose to keep regulatory mapping from becoming a static list of law names?

5. In “Structuring the AI contract,” which party is described as remaining answerable for the contracted delivery chain?

6. Under APRA's CPS 230, how is a “fourth party” expressly defined?

7. What illustrative maximum notification window is suggested for an AI-related or security incident?

8. Under “IP, indemnities and liability,” who retains all rights in Customer Data and other inputs supplied by or on the Customer's behalf?

9. What best defines a “Third party” in the tiering of AI supply-chain relationships?

10. Contract terms across the chain” lists four themes. Which theme covers “Notice, assessment rights, remediation and proportionate suspension

11. In FTC v. Rite Aid Corporation, what restriction did the stipulated order impose?

13. Under “Continuity, termination and exit,” what must the supplier's business continuity and disaster recovery arrangements be consistent with?

14. Per the “Material changes and model substitution” clause, what illustrative minimum notice period is suggested for a material change?

15. Which pairing correctly matches a risk path with its example, per “Six ways risk reaches the business”?

16. Under “Evaluation and human oversight,” what must the supplier provide before deployment and after any material change affecting acceptance criteria?

17. Under the “Dependency disclosure and subcontracting” clause, what must the supplier maintain?

18. Which four functions does the NIST AI Risk Management Framework organize around, as cited in the masterclass?

19. According to the AI roles terminology, what is an “AI model”?

20. The “Data use, training and processing location” clause restricts the supplier from doing what, absent the Customer's prior written authorization?

21. Who is defined as a “Data provider”?

22. Which of the following is NOT one of the four elements of the “operating model for AI dependencies”?

23. Which pairing correctly matches a “Contractual guardrails for AI use” theme with its own description?

26. Per the 2026 AI Omnibus timing referenced in the masterclass, when do the EU AI Act's Annex III high-risk rules and Annex I product-linked high-risk rules respectively begin to apply?

27. In the agentic banking assistant case walkthrough, what triggered the unauthorized tool call?

28. In the “Dependencies behind an AI service”, which layer most directly affects availability and location of the service?