Identify AI Applications in Security CY0-001 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is a common use of AI in security automation?

   • AEliminating the need for security policies
   • BAutomatically updating firewall rules in response to detected threats
   • CReplacing all security personnel
   • DManually reviewing each alert before any action
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A financial institution is implementing an AI-driven incident response system. They have two conflicting requirements: (1) they want to automate containment actions (e.g., isolating endpoints) as quickly as possible to limit damage, and (2) they must comply with a regulation that requires human approval for any action that could impact availability. What is the BEST way to balance these requirements?

   • AAutomate all containment actions without human approval to ensure speed
   • BRequire human approval for all actions, even low-risk ones
   • CUse predictive security to forecast the impact and only automate actions that are predicted to have no impact
   • DImplement a SOAR workflow with automated containment for high-confidence threats and human approval for actions that could impact availability
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which AI technique is commonly used in network-based threat detection to identify malicious traffic patterns that deviate from established baselines?

   • ANatural language processing
   • BAnomaly detection
   • CDigital forensics
   • DRobotic process automation
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A mid-sized company receives hundreds of low-severity phishing alerts daily. The security team is overwhelmed and cannot manually triage them all. They want to reduce alert fatigue while ensuring that critical incidents still get human attention. What is the BEST approach using AI?

   • ADeploy an AI-based SOAR platform that automatically investigates and closes low-risk alerts while escalating high-risk ones to human analysts
   • BDisable alerting for low-severity events entirely
   • CHire more analysts to manually review every alert
   • DIncrease the sensitivity of the email gateway to block all phishing emails automatically
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which security task is most suitable for AI-driven automation?

   • ADesigning new security policies from scratch
   • BConducting in-person interviews with suspected attackers
   • CMaking final decisions on complex legal compliance issues
   • DRepetitive log analysis and alert correlation
   Reveal Solution Discussion Select an answer first