Automate Security Workflows CY0-001 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A mid-sized company wants to integrate AI into their existing security tools to automate threat detection and response. They have a limited IT staff and want to minimize the complexity of integration. They also need to ensure that the AI system can work with their current SIEM and EDR. Which approach is most suitable?

   • ABuild a custom AI model from scratch and integrate it with the SIEM and EDR using custom APIs.
   • BUse open-source AI libraries and manually integrate them with the security tools.
   • CReplace the existing SIEM and EDR with a single AI-native platform.
   • DUse a cloud-based AI security service that offers pre-built integrations with common SIEM and EDR platforms.
   Reveal Solution Discussion Select an answer first
2. 12foundation · medium

   How does AI improve real-time threat detection compared to traditional signature-based methods?

   • AIt can identify previously unknown threats by learning patterns from data.
   • BIt eliminates the need for any data collection.
   • CIt only works on known malware signatures.
   • DIt requires manual intervention for every alert.
   Reveal Solution Discussion Select an answer first
4. 13foundation · medium

   Why is continuous monitoring important for an AI-driven automated security system?

   • ATo replace the need for human security analysts.
   • BTo ensure the AI models are performing accurately and not degrading over time.
   • CTo ensure the system never requires updates.
   • DTo increase the system's complexity.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security team has implemented an AI-driven automation system that can automatically block IP addresses and quarantine files. They want to ensure that the system does not cause service disruptions. They also need to track the system's performance over time. Which set of metrics should they monitor to achieve both goals?

   • ANumber of alerts generated, number of analysts on shift, and CPU usage of the SIEM.
   • BFalse positive rate, time to respond, and number of actions taken per day.
   • CModel training time, data ingestion rate, and number of retraining cycles.
   • DTotal number of blocked IPs, number of quarantined files, and number of tickets closed.
   Reveal Solution Discussion Select an answer first
6. 15foundation · medium

   Which of the following is an example of an AI tool used for security automation?

   • AA spreadsheet application for tracking incidents.
   • BA machine learning-based intrusion detection system.
   • CA manual checklist for security audits.
   • DA physical lock on a server room door.
   Reveal Solution Discussion Select an answer first