CompTIA SecAI+ 3.0 AI-assisted Security Practice Questions

Question 1

An organization is using AI to automate code scanning in their CI/CD pipeline. Which AI capability is primarily being leveraged here?

Accepted Answer

Static Application Security Testing (SAST) analysis

Answer

Generative Adversarial Networks (GANs)

Answer

Deepfake generation

Answer

Reinforcement learning

Question 2

In the context of AI-assisted security, how can Deepfakes enhance social engineering attacks?

Accepted Answer

By creating realistic audio or video impersonations of executives to authorize fraud

Answer

By encrypting the victim's hard drive faster

Answer

By brute-forcing passwords using GPU acceleration

Answer

By identifying vulnerabilities in firewall configurations

Question 3

Which of the following is an example of an AI-enabled defensive tool?

Accepted Answer

SOAR with automated playbook execution

Answer

WormGPT

Answer

FraudGPT

Answer

Polymorphic malware generator

Question 4

When using AI for 'Automated Attack Generation', what is a primary advantage for the attacker?

Accepted Answer

Ability to create polymorphic malware that changes signatures to evade detection

Answer

Slower attack speed

Answer

Higher cost of operation

Answer

Requirement for more human intervention

Question 5

A company wants to ensure their AI coding assistant does not suggest insecure libraries. They configure the tool to cross-reference suggestions against a known vulnerability database (like CVE). This is an example of:

Accepted Answer

Software Composition Analysis (SCA)

Answer

Generative Adversarial Network

Answer

Image classification

Answer

Reinforcement Learning

Question 6

A security team uses an AI tool to automatically categorize alerts as 'Critical', 'High', or 'False Positive' to reduce alert fatigue. This is an example of:

Accepted Answer

AI-assisted Incident Response / Triage

Answer

Data Poisoning

Answer

Model Inversion

Answer

Deepfake creation

Question 7

What is the primary function of the 'Model Context Protocol' (MCP)?

Accepted Answer

To standardize how AI models interface with external data and tools

Answer

To encrypt data in transit

Answer

To perform DDoS attacks

Answer

To manage user passwords

Question 8

A SOC uses an AI model to summarize long incident timelines. What is the main security analyst responsibility?

Accepted Answer

Verify the summary against source evidence

Answer

Trust the output without review

Answer

Delete the original logs

Answer

Disable case notes

Question 9

Which risk occurs when an AI coding assistant suggests vulnerable code patterns?

Accepted Answer

Insecure code generation

Answer

Wireless roaming

Answer

Printer spooling

Answer

Cable crosstalk

Question 10

Which AI-assisted SOC task can help reduce alert fatigue by grouping related alerts?

Accepted Answer

Alert clustering

Answer

Disk encryption

Answer

Cable testing

Answer

Printer pooling

Question 11

Which risk is created when AI-generated detections are deployed without analyst review?

Accepted Answer

False positives or missed detections at scale

Answer

Improved keyboard layout

Answer

Guaranteed compliance

Answer

Lower audit requirements

Question 12

Which cybersecurity use case uses AI to identify emails with malicious intent?

Accepted Answer

Phishing detection

Answer

Disk partitioning

Answer

Printer spooling

Answer

VLAN tagging

CompTIA SecAI+ Practice Questions: 3.0 AI-assisted Security

Q1. An organization is using AI to automate code scanning in their CI/CD pipeline. Which AI capability is primarily being leveraged here?

Q2. In the context of AI-assisted security, how can Deepfakes enhance social engineering attacks?

Q3. Which of the following is an example of an AI-enabled defensive tool?

Q4. When using AI for 'Automated Attack Generation', what is a primary advantage for the attacker?

Q5. A company wants to ensure their AI coding assistant does not suggest insecure libraries. They configure the tool to cross-reference suggestions against a known vulnerability database (like CVE). This is an example of:

Q6. A security team uses an AI tool to automatically categorize alerts as 'Critical', 'High', or 'False Positive' to reduce alert fatigue. This is an example of:

Q7. What is the primary function of the 'Model Context Protocol' (MCP)?

Q8. A SOC uses an AI model to summarize long incident timelines. What is the main security analyst responsibility?

Q9. Which risk occurs when an AI coding assistant suggests vulnerable code patterns?

Q10. Which AI-assisted SOC task can help reduce alert fatigue by grouping related alerts?

Q11. Which risk is created when AI-generated detections are deployed without analyst review?

Q12. Which cybersecurity use case uses AI to identify emails with malicious intent?

More CompTIA SecAI+ practice topics