Apply AI Techniques in Operations CY0-001 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security team wants to build a system to automatically detect new, unknown malware based on its behavior, rather than relying on signature-based detection. They have a large dataset of malware samples that have been confirmed as malicious and a dataset of benign software. Which machine learning approach is the MOST appropriate starting point?

   • AUse an unsupervised clustering algorithm to group the malware samples into families and then manually create signatures for each family.
   • BUse a predictive analytics model to forecast the total number of new malware samples that will be discovered next year.
   • CTrain a supervised machine learning model on the labeled datasets to classify new files as malicious or benign based on their behavioral features.
   • DUse a natural language processing model to analyze the malware's source code for malicious strings.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security operations center (SOC) receives hundreds of phishing emails daily. A new analyst is tasked with quickly identifying which emails are part of a newly observed campaign targeting the company's finance department. The emails are written in a mix of English and Spanish and contain links to a newly registered domain. Which combination of AI techniques would MOST efficiently automate the initial triage of these emails?

   • AUse an anomaly detection model to flag any email that deviates from the user's normal communication patterns.
   • BUse a supervised machine learning model to classify emails based on their sender address, and manually check the domain reputation.
   • CUse a predictive analytics model to forecast which employees are most likely to click the link, and focus triage on their emails.
   • DUse NLP to translate and analyze the email text for malicious intent, then use an automated threat intelligence feed to check the reputation of the embedded domain.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary goal of AI-based predictive analytics in security?

   • ATo react to security incidents as they occur
   • BTo forecast potential security incidents and vulnerabilities before they happen
   • CTo replace all other security controls
   • DTo automatically patch all vulnerabilities
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   A security analyst wants to train a model to detect new malware variants based on features extracted from executable files. Which machine learning approach is most appropriate?

   • AUnsupervised learning
   • BDeep learning without labels
   • CReinforcement learning
   • DSupervised learning
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   How can AI improve the efficiency of incident response?

   • ABy automatically containing and eradicating all threats without human input
   • BBy prioritizing alerts and suggesting response actions based on historical data
   • CBy replacing all security analysts
   • DBy eliminating the need for incident response plans
   Reveal Solution Discussion Select an answer first