2.12 Apply AI-driven Threat Intelligence Using Tools 350-201 Practice Questions (Page 9)

Questions 41–43

1. 41application · medium

   A security operations team is evaluating AI-driven threat intelligence platforms. They need a platform that can automatically correlate internal security events with external threat feeds and provide a risk score for each alert. Which capability is most important for this requirement?

   • AThe platform can ingest logs from the SIEM and external feeds in real time.
   • BThe platform uses machine learning to assign a risk score based on the correlation of internal and external data.
   • CThe platform has a large database of known malware signatures.
   • DThe platform can generate reports for management.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which AI technique is commonly used to analyze threat indicators and uncover hidden relationships?

   • AClustering algorithms that group similar indicators or behaviors
   • BEncrypting all indicators to protect their confidentiality
   • CManual sorting of indicators by file size
   • DDeleting duplicate indicators to reduce storage
   Reveal Solution Discussion Select an answer first
3. 43application · medium

   A security analyst is using an AI-driven threat intelligence platform to detect anomalies in network traffic. The platform flags a series of outbound connections to a known command-and-control (C2) domain from a single workstation. The analyst checks the workstation and finds that it is running a legitimate application that uses that domain for updates. What should the analyst do?

   • AImmediately block the domain on the firewall and isolate the workstation.
   • BDisable the AI-driven detection feature because it generates too many false positives.
   • CInvestigate the domain's reputation, the application's update mechanism, and whether the connections match expected behavior before deciding.
   • DTreat the alert as a true positive because the AI model identified the domain as malicious.
   Reveal Solution Discussion Select an answer first