AI for Security Threat Detection AIE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security analyst is explaining to management why the organization should invest in AI for threat detection. Which statement accurately describes a key benefit of AI in this domain?

   • AAI guarantees that all security threats will be detected
   • BAI can process and correlate large volumes of security data faster than manual analysis
   • CAI completely eliminates the need for human security analysts
   • DAI only works with on-premises security infrastructure
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company wants to detect unauthorized access attempts by analyzing login patterns. The system should flag unusual login times, locations, or devices. Which AI technique is most appropriate?

   • ABehavioral analysis that establishes a baseline for each user's login behavior
   • BStatic rule that blocks all logins from foreign countries
   • CSignature-based detection of known attack tools
   • DManual review of login logs by the security team
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A security team is deploying an AI-based malware detector. They are concerned that attackers could craft malicious files that are misclassified as benign. Which additional control would best mitigate this risk?

   • ARegularly retrain the model with new malware samples and adversarial examples
   • BRely solely on the AI model without human review
   • CIncrease the model's confidence threshold to reduce false positives
   • DUse a longer detection timeout to give the model more time
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company wants to detect command-and-control (C2) communication from malware by analyzing network traffic for unusual patterns. Which AI technique is most suitable?

   • AManual review of firewall logs
   • BAnomaly detection on network traffic to identify unusual communication patterns
   • CStatic rule that blocks all traffic to unknown IP addresses
   • DSignature-based detection of known C2 domains
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security analyst is explaining to management why the company should invest in AI-based threat detection despite having a good signature-based antivirus. What is the strongest justification?

   • AAI can detect novel and evolving threats that signature-based tools miss
   • BAI guarantees zero false positives
   • CAI is cheaper than any other security measure
   • DAI eliminates the need for security analysts
   Reveal Solution Discussion Select an answer first