AP®︎ Cybersecurity: Topic 1.5 Flashcards

A tool that analyzes security data at machine scale to recommend protections, identify likely threats, generate alerts, or perform authorized responses while qualified humans retain oversight

The settings and rules that determine how a system applies security controls, such as firewall rules and access controls

AI examination of current security settings to find excessive, conflicting, missing, or policy-inconsistent controls and recommend safer options for a security technician to review

AI inspection of application code to flag possible vulnerabilities and recommend mitigations that a knowledgeable programmer must verify and test

A system that uses rules or other analytic methods to identify events and patterns that may indicate an attack

Conditions an automated detection system treats as suspicious and the action it takes when they occur; AI-suggested rules require review by a detection engineer

A recorded occurrence in a digital system, such as an authentication attempt, connection, application request, file change, or process execution

Machine-scale analysis that sorts and prioritizes digital events by how likely they are to represent malicious activity rather than harmless activity

A false positive labels harmless activity as malicious; a false negative fails to identify actual malicious activity

An alert requests human attention and investigation; a corrective action changes a system's state to contain or stop suspected malicious activity

A corrective action automatically performed after detection when the organization has authorized that action in advance