Virtualization, Cloud Security, and AI Essentials GSEC Practice Questions (Page 11)

Questions 51–53

1. 51application · medium

   A security operations center wants to use machine learning to detect anomalous network traffic. They have a large volume of unlabeled network flows. Which approach is most appropriate?

   • ATrain a supervised classifier using the unlabeled data
   • BApply a rule-based system that only detects known attack signatures
   • CUse a deep learning model without any training
   • DUse an unsupervised learning algorithm to cluster traffic and flag outliers
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   A security team wants to deploy an AI system that flags phishing emails. They have a large dataset of labeled phishing and legitimate emails. Which approach is most appropriate?

   • AApply a deep learning model without any training data
   • BUse an unsupervised clustering algorithm to group emails without labels
   • CUse a rule-based system that only checks for known malicious URLs
   • DTrain a supervised machine learning classifier on the labeled dataset
   Reveal Solution Discussion Select an answer first
3. 53application · medium

   A cloud architect is designing a multi-tier application in AWS. They need to ensure that the application can only be accessed from the corporate network and that all data is encrypted in transit. Which combination of controls should they implement?

   • AVPN connection and unencrypted application traffic
   • BSecurity groups with source IP restrictions and TLS for all traffic
   • CNetwork ACLs with deny-all rules and FTP
   • DPublic subnets with open security groups and HTTP
   Reveal Solution Discussion Select an answer first