14. Ethics, Security and Governance of Quantum AI

Introduction and Context

Quantum artificial intelligence combines quantum information processing with machine-learning methods. Although many proposed applications remain experimental, the field has strategic significance because it may alter how organizations optimize decisions, analyze data, simulate systems, and secure information. Its governance cannot therefore be postponed until large-scale quantum computers become commercially routine. Decisions made during research, procurement, experimentation, and deployment will shape later risks and institutional responsibilities.

Quantum AI creates familiar AI concerns—privacy loss, discrimination, opacity, unsafe automation, and unclear accountability—but also introduces distinctive issues. Quantum algorithms may require new forms of data encoding and hybrid classical–quantum infrastructure. Quantum systems can be difficult to inspect directly, while their outputs may be probabilistic and sensitive to noise. At the same time, quantum computing threatens widely used public-key cryptography, creating a security transition that must begin before cryptographically relevant quantum computers exist.

Governance must consequently be understood as a sociotechnical activity. It includes technical controls, organizational decision rights, legal compliance, professional standards, documentation, independent review, and mechanisms for affected people to challenge decisions. The central strategic question is not simply whether a quantum model is powerful, but whether its benefits justify its risks and whether those risks can be controlled throughout the system life cycle.

Learning Objectives

After studying this chapter, students should be able to:

1. Explain the ethical, security, environmental, and governance challenges associated with Quantum AI.

2. Distinguish conventional AI risks from risks arising specifically from quantum computation and hybrid architectures.

3. Apply privacy, fairness, explainability, safety, and accountability frameworks to Quantum AI systems.

4. Evaluate post-quantum security, data governance, standards, regulation, and audit requirements.

5. Design an organizational oversight approach for responsible Quantum AI adoption.

6. Analyze trade-offs among performance, transparency, security, sustainability, and social value.

The Governance Problem in Quantum AI

A Quantum AI system is rarely a quantum computer alone. It normally consists of a data pipeline, classical preprocessing, a quantum or quantum-inspired algorithm, classical post-processing, an application interface, and human or automated decision-making. Each layer can introduce risk. For example, biased training data may produce discriminatory outputs even when the quantum circuit is technically correct. Conversely, a secure classical pipeline may still expose sensitive information if data are sent to an external quantum cloud without appropriate contractual and cryptographic protections.

A useful governance perspective examines five connected questions:

• Purpose: Is the use case legitimate, necessary, and socially beneficial?
• Proportionality: Are the expected benefits sufficient to justify the risks and resources involved?
• Control: Can the organization constrain, monitor, and stop the system?
• Evidence: Can performance, security, and compliance claims be independently verified?
• Responsibility: Are decision rights and liabilities assigned to identifiable people or institutions?

These questions should be addressed at the design stage rather than after deployment. A quantum advantage claim, for instance, should be separated from a claim of social or business value. A faster optimization result does not by itself establish fairness, safety, legality, or accountability.

Ethical Foundations: From Principles to Controls

Ethical principles become useful only when translated into operational requirements. Respect for autonomy may require meaningful notice, consent, and the ability to contest an automated decision. Beneficence requires evidence that the system produces a worthwhile benefit. Non-maleficence requires risk assessment, safeguards, and fail-safe procedures. Justice requires attention to unequal error rates, exclusion, and distribution of benefits. Accountability requires records, responsible officers, and accessible remedies.

Privacy and Data Governance

Quantum AI may process commercially sensitive, health, financial, biometric, or governmental data. Privacy risk arises not only from the final output but also from intermediate representations, query logs, embeddings, metadata, and cloud-provider access. Quantum encoding can make data movement and inspection less familiar to conventional data-protection teams.

A sound data-governance regime establishes data provenance, lawful purpose, ownership or stewardship, retention limits, access controls, quality requirements, and deletion procedures. Data minimization is especially important: organizations should not transfer information to a quantum service merely because the platform can process it. Where possible, de-identification, aggregation, federated learning, secure enclaves, differential privacy, or privacy-preserving computation should be considered. Each technique has limitations. De-identification may fail when datasets are linked; differential privacy reduces disclosure risk but can reduce utility; and federated approaches still require protection against inference and malicious participants.

Quantum machine learning also raises a temporal privacy problem. Data encrypted today may be collected and stored for later decryption once quantum attacks become feasible. This “harvest now, decrypt later” threat is particularly important for information with long-term sensitivity, such as medical records, diplomatic communications, industrial designs, and personal identity data.

Fairness and Bias

Bias can enter through historical data, problem formulation, labels, feature selection, measurement practices, access to quantum resources, or the choice of performance objective. A quantum model does not become neutral because its computation uses superposition or entanglement. If a lending model is trained on unequal historical approvals, quantum optimization may reproduce or amplify the pattern.

Fairness assessment should therefore consider group-level and individual-level impacts. Relevant measures may include demographic parity, equalized error rates, calibration, and subgroup performance. These criteria can conflict; selecting one requires a normative and institutional justification. Moreover, small datasets and probabilistic outputs may make subgroup estimates statistically unstable. Organizations should report confidence intervals, sample limitations, and intersectional effects rather than publishing a single fairness score.

Fairness is not limited to outputs. Access to quantum-enhanced services may itself be unequal. Wealthy institutions may obtain better hardware, specialized expertise, and proprietary datasets, while smaller organizations and public-interest groups remain dependent on external providers. Governance should address this distributional dimension through procurement standards, shared infrastructure, transparent evaluation, and inclusive research agendas.

Explainability and Interpretability

Quantum models can be difficult to explain because their internal states are not directly observable in the same way as ordinary classical variables. A circuit may involve parameterized gates, measurements, sampling, and a classical optimizer. An explanation that merely displays the circuit is unlikely to be meaningful to a patient, regulator, customer, or affected employee.

Explainability should be matched to the audience and decision. Technical documentation may describe circuit architecture, encoding, initialization, noise mitigation, measurement strategy, training procedure, and random seeds. A domain explanation may identify influential inputs, counterfactual changes, uncertainty, and reasons for a recommendation. A governance explanation should state who approved the system, what limits apply, and how a person can appeal.

Post-hoc explanation methods must be validated rather than accepted as automatically truthful. An explanation can be plausible but not causally faithful to the model. For high-impact applications, organizations should combine interpretable baselines, sensitivity analysis, counterfactual testing, model cards, system cards, and human review. If a model cannot provide an adequate explanation for a decision, its use may need to be restricted to low-impact recommendations rather than binding decisions.

Safety, Reliability, and Human Control

Quantum hardware is affected by noise, decoherence, calibration drift, limited connectivity, and measurement error. Hybrid systems also depend on classical optimizers, data-transfer links, software libraries, and cloud scheduling. A model that performs well in a laboratory may fail when hardware, data distribution, or workload changes.

Safety engineering should include hazard identification, testing under perturbation, monitoring, fallback modes, access control, incident response, and controlled shutdown. In high-impact domains, a quantum component should normally be designed so that failure does not silently trigger irreversible action. Human oversight must be substantive: operators need sufficient competence, time, authority, and information to intervene. A nominal human-in-the-loop who routinely accepts unexplained recommendations is not an effective safeguard.

Reliability claims should distinguish ideal simulation from hardware performance and benchmark performance from operational performance. Organizations should record uncertainty, confidence, error bounds, failed runs, and conditions under which the system is not suitable for use.

Security Across the Quantum AI Life Cycle

Security has two dimensions. First, Quantum AI systems themselves must be protected against attacks, misuse, manipulation, and unauthorized access. Second, quantum computing threatens existing cryptographic infrastructure.

Threats to Quantum AI Systems

Threats may target training data, circuit definitions, parameter values, software dependencies, cloud APIs, measurement results, or deployment interfaces. Examples include data poisoning, model extraction, adversarial inputs, denial of service, malicious circuit modification, side-channel leakage, and unauthorized use of expensive quantum resources. A hybrid architecture expands the attack surface because information moves repeatedly between classical and quantum components.

Security controls should include identity and access management, least privilege, secure software development, dependency verification, encrypted communication, secrets management, logging, vulnerability testing, and supplier assurance. Quantum workloads should be separated according to sensitivity and authorization. Reproducible experiment records are valuable not only for research but also for detecting unauthorized changes.

Post-Quantum Cryptography

Many current public-key systems rely on mathematical problems believed to be difficult for classical computers. Sufficiently capable quantum computers could use quantum algorithms to undermine widely deployed public-key mechanisms, particularly those based on integer factorization and discrete logarithms. Symmetric cryptography is affected differently and generally requires appropriate key sizes and careful implementation rather than complete replacement.

Post-quantum cryptography (PQC) refers to cryptographic algorithms designed to resist known quantum and classical attacks while running on conventional computers. Migration is not a single software upgrade. It requires an inventory of cryptographic assets, identification of long-lived data, assessment of dependencies, algorithm selection, testing, certificate and key-management changes, and an upgrade path for devices that cannot be easily replaced. Hybrid cryptographic modes may be used during transition when justified by standards and risk assessments.

Organizations should adopt crypto-agility: the ability to replace algorithms, keys, protocols, and implementations without redesigning the entire system. This is a governance capability as much as a technical one. Boards and senior managers should know which systems contain high-value encrypted data, how long confidentiality must last, and whether suppliers have credible migration plans.

A Governance Framework for Quantum AI

An effective framework aligns the system life cycle with three lines of responsibility. The first line consists of developers and operational teams who build controls and manage day-to-day risks. The second line includes risk, compliance, privacy, security, and ethics functions that establish requirements and challenge project assumptions. The third line is independent internal audit or equivalent assurance, which evaluates whether controls actually operate.

A practical life-cycle framework contains the following stages:

Problem Definition and Classification

The organization should define the purpose, affected populations, decision stakes, legal basis, and acceptable use. Systems used for medical treatment, employment, credit, critical infrastructure, or public services require more stringent scrutiny than systems used for entertainment or internal experimentation. A preliminary impact assessment should classify privacy, fairness, safety, security, environmental, and dual-use risks.

Design and Procurement

Requirements should include data restrictions, explainability, audit access, incident notification, model update procedures, subcontractor disclosure, service availability, portability, and deletion. Contracts with quantum cloud providers should address where data and logs are processed, who owns experiment outputs, how vulnerabilities are handled, and whether the customer can obtain sufficient evidence for regulatory or internal audits.

Validation and Independent Testing

Validation should compare the quantum method with appropriate classical baselines, not only on speed but also on accuracy, robustness, fairness, energy use, cost, and interpretability. Testing should include distribution shifts, adversarial conditions, hardware variation, missing data, extreme inputs, and subgroup analysis. Independent reviewers should be able to reproduce material results using documented configurations.

Deployment and Monitoring

Deployment requires version control, access restrictions, performance thresholds, drift detection, logging, human escalation, and a rollback mechanism. Monitoring should cover both technical and social indicators. A model can retain accuracy while producing new disparities because the population or decision environment has changed.

Retirement and Learning

Retirement is necessary when the system becomes unsafe, obsolete, noncompliant, uneconomical, or impossible to explain adequately. Disposal must include data deletion, credential revocation, archival of required records, and communication to affected stakeholders. Incidents and near misses should be reviewed to improve future projects.

Standards, Regulation, and Auditability

Quantum AI governance operates across several overlapping sources: data-protection law, sector-specific regulation, consumer-protection rules, cybersecurity requirements, professional codes, procurement obligations, and emerging AI governance frameworks. Standards can support consistent terminology, risk management, testing, documentation, and cryptographic transition, but a standard is not automatically a legal permission to deploy.

Auditability means more than retaining final outputs. An auditable system should preserve the relevant version of the data, preprocessing steps, circuit and model configuration, software dependencies, hardware or simulator conditions, parameter settings, random seeds where applicable, evaluation results, approvals, user access records, incidents, and changes. Logs must themselves be protected because they can contain sensitive data and may become targets for manipulation.

An audit trail should answer five questions: What was the system intended to do? What data and configuration did it use? Who authorized and operated it? What happened during execution? What evidence supports the resulting decision? Where privacy or trade-secret restrictions limit disclosure, organizations should provide controlled access to qualified auditors rather than claiming that no evidence can be shared.

Environmental and Social Sustainability

Quantum hardware may require specialized facilities, cooling, control electronics, repeated calibration, and substantial classical computation. The environmental assessment should therefore include the complete life cycle: hardware manufacture, facility energy, cooling, networking, classical optimization, failed experiments, and disposal. A quantum approach is not sustainable merely because it uses fewer abstract algorithmic steps.

Organizations should measure energy and resource use per useful task, compare against strong classical alternatives, avoid unnecessary experimentation, schedule workloads efficiently, and report assumptions. Sustainability also includes social effects: workforce displacement, unequal access to expertise, concentration of computational power, and the opportunity cost of funding speculative systems instead of proven public-interest technologies.

Dual-Use Risk and Responsible Innovation

Quantum AI may support beneficial applications such as drug discovery, climate modeling, logistics, and scientific research. The same capabilities may assist surveillance, cyber operations, weapons development, market manipulation, or intrusive profiling. Dual-use risk is intensified when technical components are transferable across domains and when capabilities are difficult to assess publicly.

Responsible innovation does not require abandoning all dual-use research. It requires proportional controls: use-case screening, access restrictions, red-team exercises, publication review, secure collaboration, personnel training, incident reporting, and escalation for high-risk projects. Researchers should distinguish legitimate confidentiality from secrecy used to avoid accountability. Governance boards should include technical, legal, ethical, security, and domain expertise, together with perspectives from affected communities where appropriate.

Organizational Accountability and Decision Rights

Accountability fails when responsibility is distributed so widely that no one can make or challenge a decision. Organizations should appoint accountable owners for the use case, data, model, security, privacy, and operational risk. Responsibility matrices can clarify who is responsible for execution, accountable for outcomes, consulted during decisions, and informed about changes.

Senior leadership must decide risk appetite and resource allocation, while technical teams must retain authority to pause deployment when safety or security conditions are violated. Independent ethics or risk committees should have access to evidence and the power to require remediation. Whistle-blowing and incident-reporting channels should protect employees who raise credible concerns.

Accountability also extends beyond the deploying organization. Developers, cloud providers, data suppliers, system integrators, auditors, regulators, and users each control different parts of the risk. Contracts and governance arrangements should prevent gaps in responsibility, especially where a provider describes a quantum service as a general-purpose platform and the customer assumes it carries all compliance obligations.

Illustrative Case Study: Quantum Optimization in Emergency Logistics

Background

A national emergency agency, here called Resilient Response, explores a hybrid quantum-classical optimization system to allocate medical supplies and vehicles during natural disasters. The system uses historical demand, road conditions, hospital capacity, and predicted population displacement. It produces recommended delivery routes and allocation plans for human coordinators.

Situation and Problem

Early simulations suggest that the quantum component may identify good solutions quickly for certain constrained routing problems. However, the data contain historical records from regions with unequal reporting quality. Some rural facilities appear to have lower demand because they report less reliably, not because they need fewer supplies. The agency also plans to use a commercial quantum cloud. Its legal team is concerned about sensitive location data, foreign processing, retention of job logs, and the future confidentiality of archived records.

Analysis

The project presents several interacting risks. Biased data could systematically deprioritize underserved communities. A route that is mathematically efficient may be unsafe because it ignores local knowledge or rapidly changing conditions. Quantum sampling may produce different recommendations across runs, making operational accountability difficult. The cloud arrangement creates security and sovereignty concerns, while the energy and financial costs of repeated experiments may exceed the value of marginal performance improvements.

Approach and Strategy

Resilient Response first classifies the system as high impact and limits it to advisory use. It establishes a multidisciplinary review group involving emergency managers, data-protection specialists, cybersecurity staff, logistics experts, community representatives, and quantum researchers.

The agency improves data quality, documents missingness, and introduces fairness constraints so that service levels are assessed across geographic and demographic groups. It compares the quantum approach with classical optimization and a transparent heuristic baseline. The quantum system must report uncertainty and alternative feasible plans rather than one apparently certain answer.

Sensitive data are minimized and transformed before transfer. The agency requires contractual limits on provider retention, access, subcontracting, and incident notification, while beginning a post-quantum cryptography migration for long-lived emergency records. All experiments are versioned, and each operational recommendation records input data, software, circuit settings, hardware conditions, human approval, and deviations from the recommendation.

Human coordinators can reject or modify recommendations when local information indicates that the model is wrong. The system has a fallback procedure using the classical baseline if the quantum service is unavailable, unstable, or outside validated operating conditions.

Outcome

The agency does not claim that the quantum system has produced a universal advantage. Instead, it identifies a limited set of scenarios in which the system is operationally useful. Deployment proceeds only as a controlled decision-support pilot. The governance process reveals that data-quality improvements and human coordination provide greater practical benefit than the quantum component alone.

Learning Points

The case demonstrates that responsible Quantum AI requires more than algorithmic performance. Fairness must be assessed in the data and the allocation outcome; privacy must include providers and future decryption risks; explainability must support operational decisions; and fallback mechanisms must preserve human control. It also shows why a compelling technical result may not justify unrestricted deployment.

Common Mistakes and Limitations

A frequent mistake is treating quantum terminology as evidence of superior intelligence, fairness, or security. Another is benchmarking only against weak classical methods or ideal simulators. Organizations may also overstate explainability by displaying circuit diagrams without translating them into decision-relevant reasons.

Other common failures include neglecting subgroup testing, assuming anonymization is irreversible, outsourcing responsibility to a cloud provider, ignoring cryptographic migration because large quantum computers are not yet available, and collecting excessive logs without protecting them. Sustainability assessments often omit classical preprocessing and repeated failed runs. Finally, governance committees may exist formally but lack authority, technical competence, independence, or representation of affected groups.

Quantum AI has genuine technical limitations. Current devices are noisy and resource-constrained, evidence of broad practical quantum advantage remains limited, and results may vary across hardware and implementations. These limitations make disciplined uncertainty reporting essential. Governance should be proportionate to evidence rather than driven by promotional claims.

Current Developments and Strategic Directions

The field is moving toward hybrid architectures, specialized quantum accelerators, improved error mitigation, stronger benchmarking practices, and wider adoption of post-quantum cryptography. Regulatory attention is increasingly focused on risk classification, transparency, human oversight, security, and documentation rather than on whether a system is classical or quantum.

Strategically, organizations should build quantum readiness without assuming immediate deployment. Readiness includes cryptographic inventories, staff capability, supplier assessment, data classification, experimentation policies, and governance templates. Research institutions should establish responsible-use procedures before accepting sensitive datasets or entering dual-use partnerships. Public agencies should connect procurement and national security policies with scientific evaluation and public accountability.

Best Practices for Responsible Quantum AI

A mature program should:

• begin with a clearly justified use case and a documented risk classification;
• maintain complete data, model, circuit, hardware, and decision provenance;
• compare quantum methods with strong classical alternatives;
• test privacy, security, fairness, robustness, uncertainty, and energy use;
• adopt crypto-agile architecture and a planned post-quantum migration;
• require meaningful human oversight, appeal, rollback, and shutdown procedures;
• use contracts that preserve audit access and define provider responsibilities;
• establish independent review with authority to delay or stop deployment;
• protect audit logs and disclose limitations honestly; and
• reassess the system continuously as technology, populations, threats, and regulation change.

Chapter Summary

Quantum AI governance is a strategic sociotechnical task. Ethical risks include privacy loss, bias, limited explainability, unsafe automation, unequal access, environmental cost, and dual-use misuse. These risks arise across the entire hybrid system rather than only in the quantum circuit. Effective governance translates principles such as autonomy, justice, safety, and accountability into data controls, testing, documentation, human oversight, incident response, and remedies.

Security requires protection of quantum workloads and preparation for the threat quantum computing poses to current public-key cryptography. Post-quantum migration, crypto-agility, asset inventories, and protection against long-term data exposure are organizational priorities. A life-cycle governance framework should classify use cases, control procurement, validate claims, monitor deployment, and manage retirement. Standards and regulation support consistent practice, while auditability requires reproducible evidence of data, configuration, operation, authorization, and outcomes.

Responsible Quantum AI does not mean avoiding innovation. It means selecting justified applications, comparing alternatives, acknowledging uncertainty, assigning decision rights, and ensuring that technical capability remains subject to human and institutional accountability.

Key Terms

Quantum Artificial Intelligence: The combination of quantum information processing and artificial-intelligence or machine-learning methods.

Hybrid Quantum–Classical System: An architecture in which quantum and conventional computational components jointly perform a task.

Data Provenance: A documented record of a dataset’s origin, transformations, ownership, and use.

Data Minimization: Collecting, processing, or transferring only the data necessary for a specified purpose.

Differential Privacy: A formal privacy technique that limits how much an individual’s inclusion affects an output.

Fairness: The requirement that system design and outcomes avoid unjustified discrimination or disadvantage.

Explainability: The ability to communicate how or why a system produced an output in a meaningful way.

Interpretability: The extent to which a model’s operation can be understood by relevant users or reviewers.

Model Drift: A change in data or operating conditions that reduces the validity of a deployed model.

Post-Quantum Cryptography: Cryptographic methods intended to resist both classical and known quantum attacks.

Crypto-Agility: The capability to replace cryptographic algorithms, keys, and protocols with limited system disruption.

Harvest Now, Decrypt Later: The practice of collecting encrypted information for possible decryption when stronger capabilities become available.

Dual-Use Risk: The possibility that a technology developed for beneficial purposes can also support harmful activities.

Auditability: The capacity to reconstruct, inspect, and verify relevant decisions, processes, and controls.

Quantum Advantage: A demonstrated performance benefit of a quantum method over an appropriate classical alternative for a defined task.

Human Oversight: Informed and effective human authority to review, intervene in, modify, or stop system operation.

Risk Appetite: The level and type of risk an organization is willing to accept in pursuit of its objectives.

Impact Assessment: A structured evaluation of potential technical, social, legal, environmental, and ethical effects.

Review Questions

Short Answer Questions

1. Why is Quantum AI governance described as a sociotechnical activity?

2. What is meant by crypto-agility?

3. Identify two privacy risks specific to hybrid Quantum AI workflows.

4. Why should quantum systems be compared with strong classical baselines?

5. What information should an auditable Quantum AI system preserve?

Long Answer Questions

1. Explain how privacy, fairness, explainability, and accountability can be translated into operational controls for Quantum AI.

2. Discuss the security implications of quantum computing for existing public-key cryptography and describe an organizational migration strategy.

3. Analyze the role of standards, regulation, contracts, and independent audit in governing quantum cloud services.

4. Explain how safety engineering and human oversight should be applied to a high-impact hybrid Quantum AI system.

5. Discuss the environmental and social sustainability issues that organizations should consider before adopting Quantum AI.

Analytical / Application Questions

1. A bank proposes a quantum-enhanced credit-scoring system trained on historical lending data. Design an assessment covering bias, privacy, explainability, security, and accountability before deployment.

2. A government agency wants to use a quantum optimizer for emergency resource allocation but cannot guarantee stable cloud access. Recommend a deployment architecture and fallback governance controls.

3. An organization stores highly sensitive encrypted records that must remain confidential for twenty years. Develop a prioritized post-quantum security and data-governance plan, explaining the risks it addresses.

22. Multiple Choice Questions with Answers

Question 1

Which statement best explains why Quantum AI governance must address the whole system rather than only the quantum circuit?

A. Quantum circuits are always less accurate than classical algorithms

B. Hybrid systems include data pipelines, classical processing, quantum execution, and operational decisions

C. Quantum computers cannot process confidential data

D. Governance applies only after a system becomes commercially available

Correct Answer: B. Hybrid systems include data pipelines, classical processing, quantum execution, and operational decisions

Question 2

A company transfers sensitive medical data to a quantum cloud provider without assessing retention or access practices. Which governance principle is most directly neglected?

A. Data minimization and provider data governance

B. Quantum error correction

C. Demographic parity only

D. Hardware calibration

Correct Answer: A. Data minimization and provider data governance

Question 3

Why is a circuit diagram generally insufficient as an explanation for a high-impact Quantum AI decision?

A. Circuit diagrams cannot be stored in audit records

B. It may describe technical operations without giving affected users meaningful decision reasons

C. Quantum circuits do not contain parameters

D. Regulators prohibit all technical explanations

Correct Answer: B. It may describe technical operations without giving affected users meaningful decision reasons

Question 4

Which activity is most important in preparing an organization for post-quantum security?

A. Waiting until a large-scale quantum computer is publicly available

B. Replacing every symmetric algorithm immediately

C. Creating a cryptographic inventory and identifying long-lived sensitive data

D. Removing all encryption from archived records

Correct Answer: C. Creating a cryptographic inventory and identifying long-lived sensitive data

Question 5

A quantum optimization model produces lower service levels for rural communities because historical reporting was incomplete. What is the most appropriate first response?

A. Assume the output is objective because the algorithm is quantum

B. Improve data-quality analysis and evaluate distributional effects before deployment

C. Delete all rural records from the dataset

D. Increase circuit depth without examining the data

Correct Answer: B. Improve data-quality analysis and evaluate distributional effects before deployment

Question 6

Which feature most clearly indicates meaningful human oversight?

A. An operator automatically accepts every recommendation

B. A human is named in the project documentation but has no intervention authority

C. Qualified operators can review evidence, reject outputs, and activate a fallback process

D. The system produces a more complex explanation

Correct Answer: C. Qualified operators can review evidence, reject outputs, and activate a fallback process

Question 7

What does crypto-agility enable?

A. The system to operate without authentication

B. Replacement of cryptographic algorithms and keys without redesigning the entire system

C. Automatic elimination of all cyberattacks

D. Conversion of every classical algorithm into a quantum algorithm

Correct Answer: B. Replacement of cryptographic algorithms and keys without redesigning the entire system

Question 8

Which comparison provides the strongest evidence for a claimed Quantum AI advantage?

A. Comparison with an outdated classical method using different data

B. Comparison with an appropriate classical baseline using common performance, cost, robustness, and energy measures

C. Comparison only with an ideal quantum simulation

D. Comparison based only on the number of quantum gates

Correct Answer: B. Comparison with an appropriate classical baseline using common performance, cost, robustness, and energy measures

Question 9

Why can a Quantum AI project create dual-use concerns?

A. Quantum systems can be used only for scientific research

B. Capabilities developed for beneficial optimization or analysis may also support surveillance or cyber operations

C. Dual-use applies only to biological technologies

D. Dual-use risk disappears when a system is probabilistic

Correct Answer: B. Capabilities developed for beneficial optimization or analysis may also support surveillance or cyber operations

Question 10

Which record is most valuable for reconstructing an operational Quantum AI decision?

A. Only the final recommendation

B. Only the name of the quantum hardware provider

C. Input data version, model and circuit configuration, operating conditions, authorization, and human action

D. A promotional claim about quantum advantage

Correct Answer: C. Input data version, model and circuit configuration, operating conditions, authorization, and human action