Automate Security Workflows CY0-001 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · medium

   Which practice is part of maintaining an AI-driven automated security system?

   • APeriodically retraining models with new data.
   • BDisabling logging to reduce storage costs.
   • CAvoiding any changes to the system after deployment.
   • DRemoving all human oversight from the system.
   Reveal Solution Discussion Select an answer first
2. 17foundation · medium

   Which outcome indicates that AI has improved the effectiveness of a security workflow?

   • AHigher rate of false positives.
   • BLonger incident response times.
   • CReduced time to detect and respond to threats.
   • DIncreased number of manual reviews.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company wants to automate the response to common security incidents like phishing emails and malware infections. They have a SOAR platform and want to create playbooks that automatically contain threats. However, they are concerned about the AI making incorrect decisions. What is the best way to implement automation while maintaining human oversight?

   • AAutomate only the actions that are reversible, like blocking an IP, but never automate actions that could cause downtime.
   • BDo not automate any response actions; only use AI to generate recommendations for analysts.
   • CFully automate all response actions, including isolating servers, to maximize speed.
   • DCreate playbooks that automatically perform low-risk actions like email quarantine, but require human approval for high-impact actions like isolating a server.
   Reveal Solution Discussion Select an answer first
5. 19foundation · medium

   What is the first step in integrating AI into an existing security system?

   • ADisable all existing security controls.
   • BTrain all employees on AI ethics.
   • CPurchase the most expensive AI platform available.
   • DIdentify the security processes that can benefit from automation.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A financial institution wants to detect fraudulent transactions in real-time. They have a stream of transaction data and want to use AI to flag suspicious transactions for immediate review. They also need to minimize false positives to avoid annoying customers. Which approach best meets these requirements?

   • AImplement a neural network that automatically blocks all transactions it deems suspicious without human review.
   • BCreate a static rule that flags any transaction over $10,000.
   • CUse a batch processing system that analyzes transactions at the end of the day.
   • DDeploy a machine learning model that scores each transaction in real-time and flags those above a risk threshold for manual review.
   Reveal Solution Discussion Select an answer first