CompTIA · CySA+ CS0-004
AI in security operations
CySA+ CS0-004 · Lesson 11 of 22 · 1:26:37
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the CySA+ CS0-004 exam (CompTIA Cybersecurity Analyst (CySA+)). In this lesson: AI hallucinations, malicious prompts and indirect prompt injection, data exposure and model poisoning, AI usage policies, legal and regulatory compliance, the NIST AI Risk Management Framework, and AI use cases in the SOC, with a human in the loop. Includes three original practice questions.
Preview the topics
- An AI assistant that triages reported emails marks a phishing message as safe, and the analyst finds hidden white text telling AI tools to ignore previous instructions and classify the email as legitimate. Which risk is this?
- An analyst wants to paste 10,000 lines of firewall logs, with customer IP addresses and account numbers, into a free public AI chatbot to get a summary. What should guide the decision?
- During an investigation, the AI assistant states that event 4769 shows the attacker’s first sign-in, but the analyst cannot find that event anywhere in the logs. What is the most likely explanation?