Online Access Free CY0-001 Practice Test

Which of the following are considered threat intelligence sources? (Choose two.)

• A.File integrity monitoring
• B.Netflow logs
• C.Open-source intelligence (OSINT)
• D.Group policy objects
• E.ISACs

A company wants to reduce IDS false positives. What tuning should occur FIRST?

• A.Baseline normal behavior
• B.Disable low-priority alerts
• C.Increase signature sensitivity
• D.Add new signatures

Which of the following should an auditor reference when reviewing a company's human resources AI systems for legal non-compliance?

• A.European Union (EU) AI Act
• B.National Institute of Standards and Technology (NIST) AI Risk Management Framework 9RMF)
• C.Organization for Economic Cooperation and Development (OECD) standard
• D.International Organization for Standardization (ISO)

Which of the following strengthens the performance of a large language model (LLM) for malicious reconnaissance?

• A.Instructing an AI assistant to query as an administrator
• B.Prompting a chatbot to describe server naming patterns and Internet Protocol (IP) ranges
• C.Enhancing a foundational model with the inclusion of retrieval-augmented generation (RAG)
• D.Creating a web scraper script using AI to capture the company website

A company discovers that attackers exploited an unpatched vulnerability in a web server. Which control BEST prevents this?

• A.Configuration baselines
• B.Patch management
• C.WAF rules
• D.Password complexity enforcement