AI for Security Threat Detection AIE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which real-world use case best describes how AI enhances intrusion detection?

   • AAI automatically patches software vulnerabilities without human intervention.
   • BAI encrypts sensitive files to prevent unauthorized access.
   • CAI monitors network traffic to identify patterns consistent with known attack signatures or unusual activity.
   • DAI generates strong passwords for user accounts.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security team is deploying an AI model to detect network intrusions. They have a dataset that is heavily imbalanced: 99% benign traffic and 1% actual attacks. The model currently achieves 99% accuracy but fails to detect most attacks. What is the most likely cause?

   • AThe model is underfitting the training data
   • BThe model is being attacked by adversarial examples
   • CThe model is biased toward the majority class, so it rarely predicts an attack
   • DThe model is overfitting the training data
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company is evaluating AI-based tools to detect zero-day malware. Which capability is most important for this task?

   • AThe ability to block all unknown executables
   • BIntegration with a SIEM for log aggregation
   • CA large database of known malware hashes
   • DThe ability to identify novel patterns without relying on known signatures
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A small business wants to improve its security monitoring but has only one IT generalist and a limited budget. They need to detect threats that signature-based antivirus might miss. Which approach best leverages AI for this scenario?

   • ASet up a honeypot and manually review all logs
   • BRely solely on free, open-source signature-based tools
   • CHire a team of data scientists to build a custom ML model from scratch
   • DDeploy a cloud-based AI security service that analyzes network traffic and endpoints
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A small business wants to improve its security monitoring but has limited staff and budget. They need a solution that can analyze logs and network traffic around the clock without requiring constant human attention. Why is AI particularly suitable for this need?

   • AAI only works when a human analyst is present to review alerts
   • BAI can continuously process large volumes of data and identify patterns that might indicate threats
   • CAI can guarantee that no security threat will be missed
   • DAI eliminates the need for any security policies or human oversight
   Reveal Solution Discussion Select an answer first