WGU E026 AI FOR IT AUTOMATION AND SECURITY PERFORMANCE
ASSESSMENT – QUESTIONS AND ANSWERS | VERIFIED AND WELL
DETAILED ANSWERS | PLUS RATIONALES | GUARANTEED PASS | LATEST
EXAM UPDATE
Core Domains
Machine Learning Models and Frameworks
Automated Incident Response Systems
Ethical AI Implementation and Governance
Threat Detection and Pattern Recognition
Natural Language Processing in IT Operations
AI-Driven Network Security Protocols
Data Privacy and Regulatory Compliance
Predictive Analytics for System Maintenance
Introduction
The purpose of this comprehensive assessment is to evaluate the candidate's
mastery of artificial intelligence integration within information technology
infrastructure and cybersecurity frameworks. This exam assesses the critical skills
required to deploy, manage, and secure automated systems while ensuring ethical
standards and operational efficiency. The assessment is structured using multiple-
,choice and complex scenario-based questions that mirror professional challenges
in modern IT environments. Candidates must demonstrate proficiency in
theoretical AI concepts and the practical application of machine learning to
mitigate security risks. Emphasis is placed on real-world decision-making,
ensuring that practitioners can effectively leverage AI for robust IT automation and
proactive security defense.
SECTION ONE: QUESTIONS 1–100
1. Which machine learning approach is most effective for identifying previously
unknown "zero-day" malware based on file behavior rather than signatures?
A. Supervised Learning
B. Reinforcement Learning
C. Heuristic Analysis
D. Unsupervised Learning
🟢✔️ D. Unsupervised Learning
🔴 Explanation: Unsupervised learning is ideal for detecting anomalies and
patterns in data without prior labeling, making it superior for spotting the unusual
behaviors associated with zero-day attacks that lack established signatures.
, 2. A security engineer implements an AI system to automate the blocking of IP
addresses exhibiting brute-force characteristics. What is the primary risk of
this automation?
A. Increased latency in network throughput
B. High rate of false positives locking out legitimate users
C. Reduction in the need for human oversight
D. Incompatibility with legacy firewall hardware
🟢✔️ B. High rate of false positives locking out legitimate users
🔴 Explanation: While automation increases response speed, aggressive AI-
driven blocking can misidentify legitimate login attempts as attacks, leading to
accidental denial of service for valid users.
3. In the context of AI ethics, what does the principle of "Explainability" (XAI)
require of an IT automation system?
A. The system must operate at speeds exceeding human capability.
B. The system must be encrypted to prevent unauthorized access to logic.
C. The internal logic and decision-making process must be understandable to
humans.
D. The system must automatically correct its own bias without human intervention.
, 🟢✔️ C. The internal logic and decision-making process must be understandable
to humans.
🔴 Explanation: Explainability ensures that security professionals can audit and
understand why an AI made a specific decision, which is critical for trust and legal
accountability in automated security.
4. Which of the following represents a "Data Poisoning" attack against an AI-
driven Security Operations Center (SOC)?
A. Flooding the network with ICMP packets to cause a crash.
B. Injecting malicious samples into the training set to misguide the model's
learning.
C. Stealing the model's weights to replicate it locally.
D. Using a brute-force attack to guess the administrator's password.
🟢✔️ B. Injecting malicious samples into the training set to misguide the model's
learning.
🔴 Explanation: Data poisoning involves corrupting the training data so the AI
learns to ignore specific threats or misclassify malicious activity as benign.
5. How does Natural Language Processing (NLP) specifically assist in IT threat
intelligence?
ASSESSMENT – QUESTIONS AND ANSWERS | VERIFIED AND WELL
DETAILED ANSWERS | PLUS RATIONALES | GUARANTEED PASS | LATEST
EXAM UPDATE
Core Domains
Machine Learning Models and Frameworks
Automated Incident Response Systems
Ethical AI Implementation and Governance
Threat Detection and Pattern Recognition
Natural Language Processing in IT Operations
AI-Driven Network Security Protocols
Data Privacy and Regulatory Compliance
Predictive Analytics for System Maintenance
Introduction
The purpose of this comprehensive assessment is to evaluate the candidate's
mastery of artificial intelligence integration within information technology
infrastructure and cybersecurity frameworks. This exam assesses the critical skills
required to deploy, manage, and secure automated systems while ensuring ethical
standards and operational efficiency. The assessment is structured using multiple-
,choice and complex scenario-based questions that mirror professional challenges
in modern IT environments. Candidates must demonstrate proficiency in
theoretical AI concepts and the practical application of machine learning to
mitigate security risks. Emphasis is placed on real-world decision-making,
ensuring that practitioners can effectively leverage AI for robust IT automation and
proactive security defense.
SECTION ONE: QUESTIONS 1–100
1. Which machine learning approach is most effective for identifying previously
unknown "zero-day" malware based on file behavior rather than signatures?
A. Supervised Learning
B. Reinforcement Learning
C. Heuristic Analysis
D. Unsupervised Learning
🟢✔️ D. Unsupervised Learning
🔴 Explanation: Unsupervised learning is ideal for detecting anomalies and
patterns in data without prior labeling, making it superior for spotting the unusual
behaviors associated with zero-day attacks that lack established signatures.
, 2. A security engineer implements an AI system to automate the blocking of IP
addresses exhibiting brute-force characteristics. What is the primary risk of
this automation?
A. Increased latency in network throughput
B. High rate of false positives locking out legitimate users
C. Reduction in the need for human oversight
D. Incompatibility with legacy firewall hardware
🟢✔️ B. High rate of false positives locking out legitimate users
🔴 Explanation: While automation increases response speed, aggressive AI-
driven blocking can misidentify legitimate login attempts as attacks, leading to
accidental denial of service for valid users.
3. In the context of AI ethics, what does the principle of "Explainability" (XAI)
require of an IT automation system?
A. The system must operate at speeds exceeding human capability.
B. The system must be encrypted to prevent unauthorized access to logic.
C. The internal logic and decision-making process must be understandable to
humans.
D. The system must automatically correct its own bias without human intervention.
, 🟢✔️ C. The internal logic and decision-making process must be understandable
to humans.
🔴 Explanation: Explainability ensures that security professionals can audit and
understand why an AI made a specific decision, which is critical for trust and legal
accountability in automated security.
4. Which of the following represents a "Data Poisoning" attack against an AI-
driven Security Operations Center (SOC)?
A. Flooding the network with ICMP packets to cause a crash.
B. Injecting malicious samples into the training set to misguide the model's
learning.
C. Stealing the model's weights to replicate it locally.
D. Using a brute-force attack to guess the administrator's password.
🟢✔️ B. Injecting malicious samples into the training set to misguide the model's
learning.
🔴 Explanation: Data poisoning involves corrupting the training data so the AI
learns to ignore specific threats or misclassify malicious activity as benign.
5. How does Natural Language Processing (NLP) specifically assist in IT threat
intelligence?
