Identify AI Applications in Security CY0-001 Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A security operations team uses an AI-based malware analysis system that classifies files as malicious or benign. The system has a high false positive rate, flagging many legitimate files as malicious. The team wants to improve the system's accuracy without retraining the model from scratch. What is the BEST action?

   • AIncrease the number of alerts generated by the system
   • BDisable the malware analysis system and rely on signature-based detection
   • CAdjust the classification threshold to balance precision and recall based on the team's risk tolerance
   • DManually review all files flagged as malicious
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A security team manages a hybrid environment with both on-premises and cloud assets. They use an AI-based vulnerability management tool that provides a risk score for each vulnerability. However, the team notices that the tool is flagging many low-risk vulnerabilities in the cloud environment as high-risk, causing alert fatigue. They want to adjust the tool's prioritization to better reflect their actual risk posture. What is the BEST action?

   • AUse a different vulnerability scanner that doesn't use AI
   • BCustomize the risk scoring model by incorporating asset criticality and environmental context (e.g., cloud vs. on-premises)
   • CDisable vulnerability scanning for the cloud environment
   • DIncrease the threshold for all vulnerabilities to reduce alerts
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A cloud service provider wants to detect compromised accounts that are being used to launch attacks from within their infrastructure. They have access to authentication logs, API call logs, and resource usage data. Which AI approach is BEST for identifying these compromised accounts?

   • AMalware analysis of the API call logs
   • BVulnerability management that scans the cloud infrastructure for misconfigurations
   • CPredictive security that forecasts when an account will be compromised
   • DBehavioral analysis that profiles each account's normal activity and flags anomalies
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A security team wants to reduce the time spent on vulnerability scanning and focus on the most critical issues. They have a large environment with many systems. Which AI capability would BEST help them prioritize which vulnerabilities to fix first?

   • AIncident response automation that automatically patches all vulnerabilities
   • BBehavioral analysis of the vulnerability scanner's performance
   • CMalware analysis of the vulnerability scanner's database
   • DPredictive analytics that scores vulnerabilities based on exploit likelihood and asset criticality
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A security analyst is reviewing a network alert about a file that was downloaded from an untrusted website. The analyst wants to quickly determine if the file is malicious. The security platform uses AI. Which AI capability is MOST directly applicable?

   • APredictive security that forecasts if the website will be attacked
   • BMalware analysis that classifies the file based on its characteristics
   • CBehavioral analysis of the analyst's own browsing habits
   • DVulnerability management that scans the website for weaknesses
   Reveal Solution Discussion Select an answer first