Security AI+ Module 1 – Quiz Level 1

What is the correct term for this description?
Computer systems performing tasks that normally require human intelligence, such as learning, reasoning, prediction, or language processing.

Which concept is defined as follows?
Use of AI to detect threats, predict risk, automate analysis, and support security decisions.

Which term best matches the following definition?
Analysis of patterns in historical and current data to estimate likely future security events.

What is the correct term for this description?
Use of technology to perform repeatable security tasks with limited manual intervention.

Which concept is defined as follows?
Risk arising from inadequate oversight, accountability, transparency, or policy for AI use.

Which term best matches the following definition?
The possibility that model design, assumptions, bias, or errors produce unsafe or incorrect results.

What is the correct term for this description?
The possibility that poor-quality, exposed, manipulated, or unauthorized data compromises an AI system.

Which concept is defined as follows?
AI that creates new text, images, audio, video, or code from patterns learned during training.

Which term best matches the following definition?
A model that learns the distribution or structure of training data and produces new examples with similar characteristics.

What is the correct term for this description?
Use of generative AI to create convincing, personalized social-engineering messages.

Which concept is defined as follows?
Malicious code whose form changes while its harmful purpose remains, reducing the value of static signatures.

Which term best matches the following definition?
Artificially generated security data or events used for exercises, testing, or model improvement.

What is the correct term for this description?
Authorized use of adversarial AI techniques to test how people, systems, or models withstand attack.

Which concept is defined as follows?
AI capability that can support legitimate defensive work or be repurposed for harmful activity.

Which term best matches the following definition?
A branch of AI in which algorithms learn patterns or decisions from data rather than relying only on manually written rules.

What is the correct term for this description?
Use of mathematical and statistical models to explain relationships in data or predict outcomes.

Which concept is defined as follows?
Examples supplied to an algorithm so it can learn patterns, parameters, or decision boundaries.

Which term best matches the following definition?
A measurable input variable used by a model to make a prediction.

What is the correct term for this description?
Selecting, transforming, or constructing input variables so a model can learn useful patterns.

Which concept is defined as follows?
Assignment of software samples to benign or malicious categories, or to specific malware families.

Which term best matches the following definition?
Analysis of user activity to establish normal behavior and identify suspicious deviations.

What is the correct term for this description?
Use of external and internal threat information to identify adversaries, indicators, tactics, and risk.

Which concept is defined as follows?
Learning from labeled examples in which the desired output is known.

Which term best matches the following definition?
The known target value or class attached to a supervised-learning example.

What is the correct term for this description?
Learning patterns, groups, or anomalies from data that does not have predefined labels.

Which concept is defined as follows?
High precision and auditability for tasks represented well by reliable historical labels.

Which term best matches the following definition?
Dependence on labels and historical examples, which can cause novel threats to be missed.

What is the correct term for this description?
Ability to discover patterns or anomalies in large unlabeled datasets.

Which concept is defined as follows?
Findings may be ambiguous and require analyst validation before action.

Which term best matches the following definition?
Connection of AI capabilities to EDR, SIEM, or other platforms through APIs, plug-ins, or modules.

What is the correct term for this description?
Identification of observations that differ meaningfully from an expected behavioral or statistical baseline.

Which concept is defined as follows?
A data point that is unusually distant from most other observations.

Which term best matches the following definition?
An unsupervised anomaly-detection algorithm that isolates observations through repeated random partitions.

What is the correct term for this description?
A split created by randomly selecting a feature and threshold in an Isolation Forest.

Which concept is defined as follows?
A small number of partitions needed to isolate an observation, indicating that it may be anomalous.

Which term best matches the following definition?
Data containing many features or variables for each observation.

What is the correct term for this description?
Unusual authentication activity, such as an unexpected time, location, device, or failure pattern.

Which concept is defined as follows?
Traffic behavior that departs from the normal volume, destination, protocol, or communication pattern.

Which term best matches the following definition?
Unexpected file creation, access, modification, movement, or deletion.

What is the correct term for this description?
A numeric estimate of how unusual an observation is relative to the model's baseline.

Which concept is defined as follows?
Cleaning, formatting, normalizing, and organizing data before training or analysis.

Which term best matches the following definition?
Testing whether a model's outputs are accurate, stable, useful, and appropriate for the intended environment.

What is the correct term for this description?
A neural-network architecture that models relationships and context across elements in a sequence.

Which concept is defined as follows?
A transformer component that weights which parts of an input are most relevant to each other.

Which term best matches the following definition?
A smaller, compressed transformer model designed to retain much of BERT's language capability with lower resource use.

What is the correct term for this description?
A model's numeric estimate of certainty in a prediction.

Which concept is defined as follows?
A subset of machine learning using neural networks with multiple processing layers.

Which term best matches the following definition?
A layered computational model of connected units that learns weighted relationships from data.

What is the correct term for this description?
An internal neural-network layer that transforms inputs into progressively more useful representations.

Which concept is defined as follows?
Input with many variables, such as raw executable bytes, images, packet data, or complex telemetry.

Which term best matches the following definition?
A training or architecture setting selected outside the model's learned parameters.

What is the correct term for this description?
AI techniques used to understand, interpret, classify, or generate human language.

Which concept is defined as follows?
An observable artifact, such as an IP address, domain, hash, or filename, associated with malicious activity.

Which term best matches the following definition?
Use of language analysis to identify social engineering, urgency, credential requests, or malicious persuasion.

What is the correct term for this description?
A response formatted to a defined schema, such as JSON, for reliable machine processing.

Which concept is defined as follows?
A plausible-sounding but unsupported or incorrect AI-generated statement.

Which term best matches the following definition?
A control requiring an authorized person to validate a model recommendation before consequential action.

What is the correct term for this description?
A language model with a very large parameter count and broad capability across open-ended tasks.

Which concept is defined as follows?
A lower-parameter language model optimized for reduced cost, latency, or local and specialized deployment.

Which term best matches the following definition?
A learned numeric value that influences a model's output.

What is the correct term for this description?
Broad reasoning, language, summarization, and generation capability across many tasks.

Which concept is defined as follows?
High compute, memory, latency, cost, and governance requirements.

Which term best matches the following definition?
Lower latency and cost with easier local, appliance, or on-premises deployment.

What is the correct term for this description?
Adapting a model to the terminology, patterns, and tasks of a specific field.

Which concept is defined as follows?
Running model predictions on a local device or environment rather than sending data to an external service.

Which term best matches the following definition?
A generative architecture in which a generator and discriminator improve through adversarial competition.

What is the correct term for this description?
The GAN component that creates synthetic examples intended to resemble real data.

Which concept is defined as follows?
The GAN component that attempts to distinguish real examples from generated examples.

Which term best matches the following definition?
Training in which one component or example challenges another to improve robustness or realism.

What is the correct term for this description?
Artificially generated data designed to reproduce useful characteristics of real data.

Which concept is defined as follows?
Use of generated examples to expand sparse training data, simulate threats, or improve class coverage.

Which term best matches the following definition?
A generative model that learns to reverse a gradual noising process and is widely used for image or video generation.

What is the correct term for this description?
The portion of a dataset used to learn model parameters and patterns.

Which concept is defined as follows?
A separate portion used during development to tune choices and check model quality.

Which term best matches the following definition?
A held-out portion used for the final unbiased estimate of performance on unseen data.

What is the correct term for this description?
Accidental transfer of information from validation or test data into training, producing misleading performance.

Which concept is defined as follows?
Dataset partitions that contain no overlapping records or derived information.

Which term best matches the following definition?
Evaluation that trains a model k times, holding out a different fold each time and averaging the results.

What is the correct term for this description?
One subset of data used as the held-out portion during a cross-validation iteration.

Which concept is defined as follows?
Learning training-specific noise or detail so well that performance degrades on new data.

Which term best matches the following definition?
Failing to learn enough structure from the data to perform the task accurately.

What is the correct term for this description?
Ability to perform accurately on new events not seen during training.

Which concept is defined as follows?
Change in real-world data patterns that reduces the relevance of a previously trained model.

Which term best matches the following definition?
Malicious manipulation of training data to alter model behavior or create hidden weaknesses.

What is the correct term for this description?
Testing a model with outliers, manipulated inputs, or hostile examples to identify brittleness.

Which concept is defined as follows?
Tendency to fail unexpectedly when inputs vary, contain noise, or are deliberately manipulated.

Which term best matches the following definition?
An ensemble of small decision trees trained sequentially so each tree corrects earlier errors.

What is the correct term for this description?
A neural network that learns local patterns and can analyze images, byte sequences, opcode patterns, or entropy.

Which concept is defined as follows?
A trusted classification supported by forensic analysis, analyst review, or authoritative evidence.

Which term best matches the following definition?
Automatic or heuristic labeling using sources such as threat intelligence, YARA, Sigma, or sandbox verdicts.

What is the correct term for this description?
Incorrect, inconsistent, or ambiguous labels that degrade supervised learning.

Which concept is defined as follows?
A repeated distortion in data or labels that causes unfair or inaccurate model behavior.

Which term best matches the following definition?
Giving examples different influence according to the reliability of their labels.

What is the correct term for this description?
Use of a small labeled set plus unlabeled data and feedback to improve learning.

Which concept is defined as follows?
Transformation of numeric features to a consistent scale.

Which term best matches the following definition?
Conversion of a categorical value into separate binary indicator fields.

What is the correct term for this description?
The proportion of predicted positive events that are actually positive.

Which concept is defined as follows?
The proportion of actual positive events that the model successfully identifies.

Which term best matches the following definition?
The harmonic mean of precision and recall.

What is the correct term for this description?
A table of true positives, false positives, true negatives, and false negatives.

Which concept is defined as follows?
Unsupervised grouping of observations based on similarity.

Which term best matches the following definition?
A neural network trained to reconstruct input; high reconstruction error can indicate an anomaly.

What is the correct term for this description?
Difference between an autoencoder's input and reconstructed output.

Which concept is defined as follows?
Learning in which an agent improves a policy through repeated interaction and reward feedback.

Which term best matches the following definition?
The current environment information available to a reinforcement-learning agent.

What is the correct term for this description?
A response the agent can take, such as allow, throttle, drop, or isolate.

Which concept is defined as follows?
A numeric signal indicating the value of an action's result.

Which term best matches the following definition?
The strategy mapping observed states to selected actions.

What is the correct term for this description?
Deployment in which an AI recommends actions without enforcing them.

Which concept is defined as follows?
Deployment in which an AI directly enforces selected actions.

Which term best matches the following definition?
An isolated environment using recorded events to train and test response behavior safely.

What is the correct term for this description?
Ability to reverse an automated action or return to a previous safe state.

Which concept is defined as follows?
Initial training on a massive general dataset to learn broad patterns and representations.

Which term best matches the following definition?
Generation that retrieves relevant external documents as prompt context without retraining the foundation model.

What is the correct term for this description?
Additional training of a pretrained model on a smaller task-specific dataset.

Which concept is defined as follows?
Reuse of knowledge learned for a broad or earlier task to improve a related task.

Which term best matches the following definition?
One complete pass through the training dataset.

What is the correct term for this description?
Removal of low-impact model weights or elements to reduce size and improve inference speed.

Which concept is defined as follows?
Representation of weights or activations at lower numeric precision to reduce memory and accelerate inference.

Which term best matches the following definition?
Training that accounts for lower-precision representation to preserve model performance.

What is the correct term for this description?
Use of a trained model to generate a prediction or response.

Which concept is defined as follows?
Collaborative training in which clients keep raw data locally and send model updates to a central coordinator.

Which term best matches the following definition?
The shared model initialized, distributed, and updated by a central federated-learning server.

What is the correct term for this description?
Model training performed on a client using only that client's local data.

Which concept is defined as follows?
Learned weights or gradients returned by a client instead of its raw records.

Which term best matches the following definition?
A value indicating how model parameters should change to reduce error.