1.2 Explain the Role of AI and Machine Learning (ML) in Security Operations CLOUD-SECURITY-PROFESSIONAL Practice Questions (Page 6)

Questions 26–26

1. 26application · medium

   A SOC analyst is reviewing an ML model that flags network traffic as malicious. The model has a high false positive rate, causing analysts to investigate many benign alerts. What is the most appropriate first step to improve the model's precision?

   • AIgnore the false positives and focus only on true positives.
   • BRetrain the model with more labeled benign traffic samples to help it better distinguish normal from malicious activity.
   • CIncrease the model's sensitivity threshold to catch more potential threats.
   • DDisable the model and rely on manual analysis of all traffic.
   Reveal Solution Discussion Select an answer first