For AI-enabled medical devices, the most required aspects for certification are safety, transparency, and side effects. Here's why:
* Safety (Aspect III): Critical for ensuring that the AI system does not cause harm to patients.
* Transparency (Aspect IV): Important for understanding and verifying the decisions made by the AI system.
* Side Effects (Aspect V): Necessary to identify and mitigate any unintended consequences of the AI system.
Why Not Other Options:
* Autonomy and Maintainability (Aspects I and II): While important, they are secondary to the immediate concerns of safety, transparency, and managing side effects in life-critical processes.
References:This explanation is aligned with the critical quality characteristics for AI-based systems as mentioned in the ISTQB CT-AI syllabus, focusing on the certification of medical devices.

Section1.7 - Neural Networksof the ISTQB CT-AI syllabus explains that neural networks consist of neurons connected by weighted links. During training,learning occurs by adjusting the weights on these connections. This is the essence of gradient descent and backpropagation. Option B correctly states this behavior: only theweightsare modified, not the activation functions, neuron counts, or architectural structure.
Option A is incorrect because a neuron'sbiasis not determined by previous activations; it is an independent trainable parameter added to the weighted input sum. Option C is incorrect because the syllabus states that a single-layer perceptron is a valid type of neural network, although limited to linearly separable problems.
Option D is incorrect because no rule requires the number of input neurons to exceed or equal the number of output neurons. Instead, input neurons correspond to thenumber of features, while output neurons correspond totasks or classes.
Therefore,Option Bprecisely reflects the syllabus definition of what changes during neural network training.

The ISTQB CT-AI syllabus explains inSection 4.5 - Testing AI-Specific Risksthat adversarial testing is a structured test activity in which testers applyadversarial attacks-crafted or perturbed inputs-to intentionally expose weaknesses in the ML model. The purpose is to identify vulnerabilities that could be exploited throughdata poisoning,evasion attacks, orinput manipulation. OptionCcorrectly reflects this syllabus definition: adversarial testing is aboutusing attacks to locate weaknesses so they can be removed or mitigated.
Option A is incorrect because regression testing does not verify data sourcing policies; it verifies unchanged functionality after modifications. Option B is incorrect because adversarial examples are oftenaddedto training datasets to improverobustness(a practice called adversarial training), not excluded. Option D is incorrect because AIB testing is not described as superior to exploratory data analysis in outlier detection; both have different purposes, and EDA remains essential for data quality assessment.
Thus,Option Cis consistent with syllabus-defined adversarial testing.

The syllabus explicitly mentions challenges of handling personal data and ensuring privacy when testing AI- based systems:
"The management of personal data and sensitive data is often a concern during testing, as testing typically requires realistic data and it is difficult to fully anonymize data." (Reference: ISTQB CT-AI Syllabus v1.0, Section 7.3, page 52 of 99)

According to Section4.6 - AI Behaviour Testing (AIB Testing)of the ISTQB CT-AI syllabus, AIB testing is used to evaluate changes in the functional behavior of self-learning systems. The core principle iscomparing pre-change and post-change model behavior using the same test inputs, so that any difference in outputs can be attributed to the model's learning and not to differences in input data. This directly corresponds to OptionC.
Option A is incorrect because the absence of a test oracle does not justify generating new test cases; AIB relies onreusing identical inputsto detect behavioral drift. Option B is invalid because using different inputs prevents meaningful comparison. Option D is incorrect because comparing with an unrelated non-self- learning system does not allow evaluation of the same model's behavioral evolution.
Thus, OptionCaccurately represents the correct application of AIB testing: assessing model behavior changes by running identical test inputs before and after learning updates.