CY0-001: CompTIA SecAI+

By CompTIA · Question Mode

QuestionQ34

AI-assisted security

A security operations center (SOC) team uses an AI agent that conducts web searches and makes calls to the Security Orchestration, Automation, and Response (SOAR) solution. The team is concerned about enterprise uptime and case-resolution time. Which of the following is the most appropriate use of the AI agent?

Explanation

Open-source intelligence enrichment adds context about indicators, entities, and threats to alerts, enabling faster and better-informed triage without allowing an AI agent to make potentially disruptive containment changes to users or production hosts. SOAR platforms explicitly support enrichment workflows that collect and attach incident data to improve response decisions.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!