A global security operations center (SOC) wants to adapt and leverage the strength of AI in order to enhance its security operations. Which of the following is the best way to enhance the global SOC functions?

• A.Generate code and execute in production to help save time.
• B.Enable a personal assistant that can act in the global SOC with no human intervention.
• C.Use open-source models in production to help the efficiency of threat detection and threat analysis.
• D.Summarize alerts to easily gain insights on the environment.

Comment: *

Name: *

Email: *

Verification: *

A machine learning (ML) engineer is working with a security engineer to identify the best practices for securing a system with various AI models.
Which of the following actions should the engineers suggest?

• A.Conducting guardrail testing and security validation
• B.Following a secure model development life cycle (MDLC)
• C.Implementing comprehensive security architecture
• D.Using a secure software development life cycle (SDLC)

Comment: *

Name: *

Email: *

Verification: *

A line of business wants to onboard an application that uses a custom AI model for employee assessments. The Chief Information Officer (CIO) agrees to allow the engagement to proceed but first wants a threat model. Which of the following is the most appropriate to use for an AI threat model?

• A.Responsible AI
• B.Adversarial Threat Landscape for AI Systems (ATLAS)
• C.Organization for Economic Co-operation and Development (OECD)
• D.International Organization for Standardization (ISO)

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the most concerning risk for a company that allows corporate end users to use public-facing large language models (LLMs)?

• A.Inaccuracies due to hallucinations
• B.Out-of-date acceptable use policies
• C.Data security regulatory violations
• D.Malicious code generation

Comment: *

Name: *

Email: *

Verification: *

Which of the following attacks would be the best to automate with AI during dynamic application software testing (DAST)?

• A.Distributed denial-of-service (DDoS)
• B.Data poisoning
• C.Payload creation
• D.Threat modeling

Comment: *

Name: *

Email: *

Verification: *