AI-assisted Security

SecAI+ · 48 questions

• City developers use an IDE security plug-in that flags risky patterns while building the permits API. What AI-assisted security use does this illustrate?
• SOC analysts use a browser plug-in that summarizes CVE pages while triaging municipal vulnerabilities. Which AI-enabled tool pattern is this?
• Network ops run a CLI AI helper that explains firewall hit counters during an outage bridge. What AI-assisted security capability is demonstrated?
• A SOC chatbot drafts first-pass incident timelines from SIEM excerpts for the duty officer. What AI-assisted use case is this?
• A CISO’s personal AI assistant prepares talking points from last week’s vulnerability scan summaries. What practice should still apply?
• County SecOps connects an MCP server so an assistant can safely query allowlisted ticketing tools. What role does the MCP server play?
• AI assists signature matching across EDR alerts during a ransomware wave on city endpoints. Which AI-assisted detection use is this?
• AI linting catches insecure deserialization patterns in a new courts e-filing service. What AI-assisted DevSecOps capability is shown?
• Analysts use AI to prioritize scanner findings on water-utility SCADA jump hosts. What AI-assisted security task is this?
• A scheduled AI-assisted pentest probes the public 311 portal within an approved scope window. What requirement remains essential?
• AI anomaly detection flags unusual VPN logins from assessor staff accounts overnight. What AI-assisted security capability is demonstrated?
• City email security uses AI to cluster look-alike messages that target payroll clerks with fake direct-deposit changes. What security-task capability is the model providing?
• When the transit SOC opens an incident, an AI helper suggests severity and owner fields from the alert text before an analyst confirms. Which use of AI-enabled tooling does this illustrate?
• Security architects ask an AI assistant to propose STRIDE-style questions for a new elections voter-lookup portal, then decide which threats to track. What is the appropriate role of the AI tool?
• Finance notices AI scoring that highlights odd refund chains on business-license payments after hours. Which AI-assisted security task best describes this capability?
• After a city breach, communications needs resident security notices in several common languages within hours. How can AI best support that security communications task?
• The change advisory board receives a thick week of firewall change logs and asks for a readable packet. Which AI-assisted security task should the SOC apply?
• Wastewater engineers must review sensitive packet captures on an air-gapped plant network and cannot send traces to a public cloud chatbot. Which AI security tool choice best fits the constraint?
• Finance receives a video that appears to show the mayor urgently ordering a wire to a ‘disaster relief’ account that city treasury does not recognize. What AI-enhanced attack vector should responders consider first?
• Synthetic social posts claim the municipal water supply is poisoned, and 911 call volume spikes even though plant sensors are normal. Which AI-enhanced attack impact does this illustrate?
• Coordinated generative content floods local channels with fabricated stories meant to make voters distrust certified county election results. What AI-enhanced attack vector is primarily at work?
• Slightly perturbed images cause a municipal license-plate camera model to miss vehicles on a watch list even though humans can still read the plates. What AI-enhanced attack technique is indicated?
• Attackers feed public org charts and news into an AI system to build ranked lists of city staff titles for spear-phishing. Which AI-enhanced attack activity is this?
• Helpdesk receives a call that sounds exactly like the CIO urgently demanding a password reset for a ‘locked’ finance account. What AI-enhanced social-engineering technique should staff suspect?
• Endpoint tools miss a sample because AI rewrote distinctive malware strings while keeping the same malicious behavior against city workstations. Which AI-enhanced attack capability does this describe?
• After a badge dump leaks, attackers use AI to merge the dump with professional profiles and highlight which accounts likely have privileged access. What AI-enhanced attack step is shown?
• An unauthorized AI fuzzer discovers a forgotten debug endpoint on a public permits microservice during continuous probing. Which AI-enhanced attack capability does this represent?
• Threat intelligence reports phishing lures that AI customized for public works, finance, and courts using each department’s jargon. What AI-enhanced attack capability is described?
• Adversaries train models to recognize telltale honeypot behaviors and route botnet traffic around those municipal decoys. What AI-enhanced attack impact should defenders anticipate?
• During property-tax payment week, attackers use AI to pick peak hours and high-value endpoints for a botnet flood against the portal. Which AI-enhanced attack planning activity is this?
• IR receives a video ‘mayor directive’ to disable MFA citywide and compares it to known authentic channels before acting. What operational skill does this primarily demonstrate?
• External scanners with AI summarizers inventory unprotected model APIs across city subdomains and dump findings into a paste site. What AI-enhanced attack activity is occurring?
• Clerk security training stresses that generative tools make personalized phishing cheap enough to hit every desk, not just executives. What defensive awareness concept is the training emphasizing?
• The SOC builds a low-code flow that enriches indicators of compromise from allowlisted feeds before an analyst reviews the case. Which AI/automation approach for security tasks does this illustrate?
• When an AI anomaly score crosses a threshold, a no-code playbook automatically opens a security ticket for the housing-authority SOC. What automation pattern is this?
• After a multi-day incident, fire-district IR wants a coherent after-action draft from scattered shift notes. Which AI automation task best fits?
• During a citywide phishing wave, the municipal SOC’s AI proposes merging dozens of near-identical resident-help tickets. Which IR ticket-management use best fits?
• The city’s change advisory board uses AI to flag change requests that omit a rollback plan before humans vote. What automation pattern is this?
• A new permits-chatbot model fails health checks after deploy, so the pipeline restores the last known-good version automatically. Which practice is demonstrated?
• An AI agent collects EDR host details for water-utility analysts but is blocked from isolating hosts by itself. What agent design principle applies?
• Courts IT blocks merges on the case-management repo unless AI-assisted code scanning passes. Which CI/CD security practice is this?
• Software composition analysis with AI prioritization flags a critical library in the city’s 311 mobile app. What CI/CD practice does this illustrate?
• Regression tests fail after a public-health chatbot prompt-template change breaks PII redaction. What CI/CD control caught the issue?
• Automated model tests fail when a new fine-tune of the housing-benefits assistant starts leaking sample SSNs in outputs. What pipeline control is working?
• The city requires scan results, model tests, and dual human approval before promoting a parks chatbot to production. Which deployment practice is this?
• Emergency-management playbooks auto-enrich incidents but pause before any public notification draft is sent. What automation safety pattern is shown?
• For hosts adjacent to municipal SCADA, policy forbids fully automated AI isolation even when detections look strong. What principle is the city applying?
• A phishing surge triggers AI triage, ticket creation, and a draft user notice that waits for the CISO to send. Which end-to-end automation pattern is this?