Question
A security administrator needs to improve an AI model. During an initial investigation, the administrator notices that two successive login failures are recorded every day, and then a successful login occurs after a specific time interval. All the successful login attempts have been during office hours.
Which of the following techniques should the administrator use to improve the AI model's security?
- A. Access management
- B. Pattern recognition Correct
- C. Signature matching
- D. Vulnerability analysis
Explanation
The evidence is a recurring behavioral sequence (two failures, a timed delay, then success, always in office hours), so pattern recognition lets the model learn this behavior and flag deviations from it or recognize it as a possible low-and-slow attack. Signature matching only finds known, predefined indicators, access management changes who may log in rather than how the model detects behavior, and vulnerability analysis looks for weaknesses in systems, not activity patterns.
