Enhance Detection and Response CY0-001 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A security team wants to implement a predictive security system to forecast which servers are most likely to be targeted by attackers in the next quarter. They have historical data on past attacks, vulnerability scans, and threat intelligence. Which approach would yield the most accurate predictions?

   • AAsk security analysts to manually rank servers based on their experience.
   • BBase predictions solely on the latest threat intelligence feeds.
   • CUse a simple rule that predicts the servers with the most vulnerabilities will be attacked.
   • DTrain a machine learning model that uses features such as vulnerability severity, exploit availability, server criticality, and historical attack patterns.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is a key benefit of using AI to prioritize vulnerabilities for remediation?

   • AIt guarantees that no vulnerability will be exploited.
   • BIt ensures that all vulnerabilities are patched immediately.
   • CIt reduces the risk of exploiting critical vulnerabilities by focusing on the most impactful ones first.
   • DIt eliminates the need for manual vulnerability assessments.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A security team is training a machine learning model to detect phishing emails. They have a dataset of 10,000 emails, of which only 100 are phishing. The model is trained and achieves 99% accuracy on the test set. However, when deployed, it misses most phishing emails. What is the most likely cause of this problem?

   • AThe model is underfitting and is too simple to capture the complexity of phishing emails.
   • BThe model is overfitting to the training data and does not generalize to new emails.
   • CThe model is using the wrong features, such as email length instead of content.
   • DThe model is biased towards the majority class (non-phishing) because the dataset is highly imbalanced.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   How does AI enhance security analytics compared to traditional analytics?

   • ABy replacing the need for security information and event management (SIEM) systems.
   • BBy eliminating the need for data collection.
   • CBy guaranteeing that all security alerts are true positives.
   • DBy providing deeper insights through advanced pattern recognition and anomaly detection.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is an example of predictive security using AI?

   • AScanning files for known malware signatures.
   • BAnalyzing historical attack data to forecast the likelihood of future attacks on specific systems.
   • CQuarantining an infected endpoint immediately after detection.
   • DManually reviewing security logs to identify past breaches.
   Reveal Solution Discussion Select an answer first