AI for Security Threat Detection AIE Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A security team is considering using an AI model to detect zero-day exploits. They have a dataset of network traffic from past attacks, but no examples of the zero-day exploit they are trying to detect. Which approach is most appropriate?

   • ADeploy a static rule that blocks all traffic from unknown IP addresses
   • BUse signature-based detection with known exploit signatures
   • CUse unsupervised anomaly detection to identify deviations from normal network behavior
   • DTrain a supervised classifier using only past attack data
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A security operations center uses an AI-based tool that flags suspicious login attempts. The tool currently produces a high number of false positives, causing analysts to ignore alerts. The team wants to improve precision without missing true attacks. Which action is most appropriate?

   • AIncrease the alert threshold to only flag the most extreme anomalies
   • BReduce the amount of data collected to simplify analysis
   • CIncorporate additional context, such as geolocation and device fingerprinting, into the model
   • DDisable the AI tool and rely on manual log review
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A company wants to detect network intrusions that involve unusual sequences of commands sent to a server. Which AI approach is most appropriate?

   • AImage recognition to analyze server screenshots
   • BMachine learning model trained on normal command sequences to flag deviations
   • CRule-based system with static signatures
   • DNatural language processing to interpret the commands
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A security analyst is evaluating an AI-based threat detection system. The system must be able to adapt to new types of attacks that have never been seen before. Which capability of AI is most relevant?

   • AThe ability to replace all human security analysts
   • BThe ability to learn patterns from data and generalize to unseen examples
   • CThe ability to guarantee zero false positives
   • DThe ability to store and retrieve known attack signatures
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which statement best describes the core goal of security threat detection?

   • ATo ensure that no security alerts are ever generated.
   • BTo prevent all unauthorized access by blocking every external connection.
   • CTo replace all existing security controls with AI-based solutions.
   • DTo identify potential security incidents or malicious activities that could compromise an organization's assets.
   Reveal Solution Discussion Select an answer first