CY0-001: CompTIA SecAI+

Question

A security operations center (SOC) has an extremely high volume of logs and alerts. The manager proposes implementing a machine learning (ML) system to assist with triage. Which of the following tasks is most suitable?

Explanation

Classification models assign observations to defined categories using learned patterns from labeled examples. Classifying incoming security alerts can prioritize and route high alert volumes for analyst triage; filters are deterministic rules, while automated patching is a separate remediation process. AWS documentation on classification models

Learn more

Types of ML Models — Amazon Machine Learning

CY0-001: CompTIA SecAI+

AstroTutor

Notes

Readiness

QuestionQ13

Community Discussion