Question
A global security operations center (SOC) wants to adapt and leverage the strength of AI in order to enhance its security operations. Which of the following is the best way to enhance the global SOC functions?
- A. Generate code and execute in production to help save time.
- B. Enable a personal assistant that can act in the global SOC with no human intervention.
- C. Use open-source models in production to help the efficiency of threat detection and threat analysis.
- D. Summarize alerts to easily gain insights on the environment. Correct
Explanation
Using AI to summarize and correlate alerts helps analysts across the SOC triage faster and understand the environment, while humans still make the decisions. Running generated code directly in production and letting an assistant act with no human intervention remove the oversight that AI-assisted security requires. Putting open-source models into production is not by itself an enhancement and adds unvetted risk.
