Enhance Detection and Response CY0-001 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a key advantage of using AI for real-time threat detection compared to traditional signature-based detection?

   • AAI eliminates the need for any human oversight in the detection process.
   • BAI only works with predefined rules and cannot adapt to new threats.
   • CAI can detect previously unknown threats by identifying anomalous behavior, not just known signatures.
   • DAI requires less data to operate effectively than traditional methods.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a key capability of AI-enhanced security analytics?

   • AStoring security logs in a centralized database.
   • BProviding a user interface for security analysts to view alerts.
   • CEncrypting data at rest to protect it from unauthorized access.
   • DCorrelating data from multiple sources to identify complex attack patterns.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of automated incident response in an AI-assisted security system?

   • ATo replace human decision-making entirely in all security incidents.
   • BTo generate detailed reports for compliance audits without any action on the incident.
   • CTo automatically execute predefined actions to mitigate the impact of detected security incidents.
   • DTo manually notify security analysts of every detected event, regardless of severity.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A user's account was compromised, and the attacker used the account to access sensitive files. The security team wants to implement a behavioral analytics system to detect similar compromises in the future. Which capability is most important for this system to have?

   • AIntegrate with the company's ticketing system to log all user access requests.
   • BEstablish a baseline of normal user behavior, including access times, locations, and file access patterns.
   • CRequire multi-factor authentication for all users.
   • DScan all files on the network for malware signatures.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How is Natural Language Processing (NLP) used in security to extract actionable insights?

   • ABy analyzing unstructured text data, such as security reports and threat feeds, to identify relevant information and trends.
   • BBy scanning binary files for malware signatures.
   • CBy blocking malicious websites based on their domain names.
   • DBy encrypting all text-based communications to protect confidentiality.
   Reveal Solution Discussion Select an answer first