Evaluating an automated security alert
An AI-assisted tool flags a fictional employee’s unusual login time as suspicious. Which action best uses the alert responsibly?
A
Publish the employee’s credentials in a public report so others can test them.
B
Correlate the alert with authentication records and legitimate work context before deciding whether compromise occurred.
C
Treat the alert as conclusive proof that the employee is an attacker.
D
Disable every security control because the model could make a mistake.
Question Leaderboard
Not enough data yet to show leaderboard.