2.12 Apply AI-driven Threat Intelligence Using Tools 350-201 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   How can AI be applied to detect patterns indicative of malicious activity?

   • ABy randomly selecting network traffic samples for human review
   • BBy disabling all security monitoring to reduce noise
   • CBy training models on historical attack data to recognize similar behavior
   • DBy manually comparing each event against a static list of known signatures
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security analyst is using an AI-driven tool to detect lateral movement in the network. The tool flags a user account that is logging in from multiple workstations in a short period. The analyst must decide whether this is malicious. What should the analyst do?

   • AIgnore the alert because the AI tool has a high false-positive rate.
   • BCheck the AI tool's explanation and the user's normal behavior patterns.
   • CBlock all the workstations involved.
   • DImmediately disable the user account.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which feature is typical of an AI-driven threat intelligence platform?

   • AStoring all threat data in a flat file for manual analysis
   • BProviding only raw, unprocessed threat data
   • CRequiring analysts to manually update all threat feeds
   • DUsing natural language processing to extract indicators from unstructured reports
   Reveal Solution Discussion Select an answer first
5. 24expert · medium

   A security analyst is using an AI-driven threat intelligence platform that uses a supervised learning model to detect phishing emails. The model was trained on a dataset of emails from the organization's own environment. The analyst notices that the model performs well on internal emails but poorly on emails from external sources. What is the most likely cause of this issue?

   • AThe model is using too many features, causing it to focus on irrelevant details.
   • BThe model is underfitting because it is too simple to capture the complexity of phishing emails.
   • CThe model is overfitting to the training data and does not generalize well to new, unseen email patterns.
   • DThe model is not being updated frequently enough with new threat intelligence.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which method is used to assess the accuracy of AI-generated threat intelligence?

   • AChecking the age of the AI model
   • BAsking the AI tool to rate its own confidence
   • CComparing AI-generated indicators against known true positives and false positives
   • DCounting how many alerts the AI tool generates per day
   Reveal Solution Discussion Select an answer first