Apply AI Techniques in Operations CY0-001 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which NLP task is used to determine whether a security-related text, such as a threat report, has a positive, negative, or neutral tone?

   • ASentiment analysis
   • BMachine translation
   • CNamed entity recognition
   • DTopic modeling
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security analyst is using an AI-powered threat intelligence platform that aggregates data from multiple sources. The platform flags a new malware campaign targeting a specific industry. The analyst wants to assess the credibility of this intelligence before taking action. The platform provides a confidence score, but the analyst is unsure how it was calculated. What is the MOST important factor for the analyst to consider when evaluating the reliability of this AI-generated threat intelligence?

   • AThe speed at which the platform was able to aggregate the data and generate the alert.
   • BThe number of sources that reported the same campaign.
   • CThe confidence score provided by the AI platform.
   • DThe reputation and diversity of the sources that the AI model used to generate the intelligence.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which task is commonly automated by AI in threat intelligence platforms?

   • APerforming manual penetration testing
   • BConducting forensic analysis of compromised systems
   • CCorrelating indicators of compromise (IOCs) from multiple sources
   • DWriting incident response reports
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which AI technique is best suited for analyzing the content of phishing emails to identify malicious intent?

   • AAnomaly detection
   • BPredictive analytics
   • CNatural language processing
   • DReinforcement learning
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company's SOC is overwhelmed by a high volume of low-severity alerts. The management wants to reduce the manual workload on the analysts. They have a well-defined and documented runbook for handling a specific type of low-severity alert, such as a single failed login attempt from a known internal IP. Which AI-driven automation approach is the MOST appropriate to implement first?

   • AUse a natural language processing model to read the runbook and generate a new automated response for each alert.
   • BImplement a supervised machine learning model to predict which alerts are false positives and automatically close them.
   • CDeploy an anomaly detection system to identify any deviation from the alert's normal pattern and escalate it to a human.
   • DCreate a rule-based automation workflow that triggers the documented runbook steps when the specific alert conditions are met.
   Reveal Solution Discussion Select an answer first