2.12 Apply AI-driven Threat Intelligence Using Tools 350-201 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security team is evaluating the effectiveness of their AI-driven threat intelligence platform. They want to measure how well the platform's alerts correlate with actual incidents. Which metric is most appropriate?

   • AThe precision and recall of the platform's alerts.
   • BThe number of alerts generated per day.
   • CThe time it takes to generate a report.
   • DThe number of threat feeds integrated.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the most important factor when evaluating the relevance of AI-generated threat intelligence?

   • AThe cost of the AI tool that generated the intelligence
   • BThe visual appeal of the intelligence dashboard
   • CWhether the intelligence applies to your organization's environment and threat model
   • DThe total number of indicators in the report
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security team is researching AI-driven threat intelligence to improve their incident response. They want to understand how machine learning can help in the analysis phase. What is a key advantage of using machine learning in threat analysis?

   • AIt can automatically patch vulnerabilities in the network.
   • BIt can identify patterns in large datasets that indicate malicious activity.
   • CIt can guarantee zero false positives.
   • DIt can replace the need for security analysts.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security operations center (SOC) uses an AI-driven threat intelligence platform that correlates internal network telemetry with external threat feeds. The SOC wants to reduce alert fatigue by automatically prioritizing alerts that match known malicious infrastructure. The team needs to integrate the AI outputs into their existing SIEM. What should they do?

   • AManually copy the AI platform's indicators into the SIEM every day.
   • BDisable all alerts that do not match the AI platform's indicators.
   • CConfigure the SIEM to ingest the AI platform's threat intelligence feeds and create correlation rules that assign priority based on the AI confidence scores.
   • DReplace the SIEM with the AI platform's alerting system.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is a primary benefit of using machine learning in threat intelligence collection?

   • AIt automatically correlates unrelated data sources to identify emerging threats
   • BIt replaces the need for external threat feeds with internally generated data
   • CIt guarantees that all collected threat data is accurate and free of false positives
   • DIt eliminates the need for human analysts in the threat intelligence process
   Reveal Solution Discussion Select an answer first