1.4 Differentiate Between AI and Machine Learning (ML) in Security Operations SECURITY-OPERATIONS-PROFESSIONAL Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the primary difference between AI and ML in their approach to solving security problems?

   • AAI uses rule-based and knowledge-driven methods, while ML relies on data-driven statistical learning.
   • BAI relies on statistical learning, while ML uses expert knowledge to make decisions.
   • CAI and ML both use the same approach, which is purely based on predefined rules.
   • DAI uses data-driven statistical learning, while ML uses rule-based methods.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   In the context of security operations, which statement best defines artificial intelligence (AI)?

   • AA field of computer science focused on simulating human intelligence to perform tasks such as threat detection and response.
   • BA system that automatically blocks all network traffic that appears unusual.
   • CA technology that uses predefined rules to match known attack signatures.
   • DA statistical method that learns patterns from historical security data without explicit programming.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which statement best defines machine learning (ML) in the context of security operations?

   • AA technique that uses predefined signatures to identify known malware.
   • BA method of encrypting data to protect it from unauthorized access.
   • CA set of manually written rules that security analysts use to filter alerts.
   • DA subset of AI that enables systems to learn from data and improve over time without being explicitly programmed for each task.
   Reveal Solution Discussion Select an answer first
5. 29application · easy

   A security vendor claims their product uses 'AI' to detect malware. Upon review, the product uses a model trained on millions of file samples to classify new files as malicious or benign. How should an analyst accurately describe this capability?

   • AIt is a rule-based system that requires manual updates.
   • BIt is an expert system using predefined rules for malware detection.
   • CIt is an example of machine learning, which is a subset of AI.
   • DIt is an AI system that uses reasoning to make decisions.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A security analyst is evaluating a new tool that claims to use 'AI' for incident response. The tool automatically quarantines infected endpoints based on a predefined set of criteria. How should the analyst set expectations?

   • AThe tool uses machine learning to learn from past incidents.
   • BThe tool uses deep learning to make decisions.
   • CThe tool uses rule-based automation, which is a form of AI but not machine learning.
   • DThe tool uses natural language processing to understand incident reports.
   Reveal Solution Discussion Select an answer first