Cybersecurity and Response Planningintermediate
Explain why human review remains necessary even when an organization uses automated detection.
Answer
Automation can reduce cost and improve efficiency or reliability, but an alert may represent harmless unusual behavior or a genuine threat. Analysts interpret context, investigate correlations, and decide whether response is warranted.
Explanation
### What a good answer covers
- Automation can surface patterns quickly and consistently.
- Alerts do not automatically prove an incident occurred.
- Analysts use context and investigation to distinguish harmless behavior from threats.
- Human review supports decisions that require judgment.
### Remember
Automation finds signals; people assess their meaning.
Related Questions
- Which of the following is an example of an adversary attack activity, as opposed to a system vulnerability or a defensive measure? (Select all that apply.)(intermediate)
- Which information is most directly useful when coordinating technical response across teams?(basic)
- Attackers necessarily complete all life-cycle stages quickly, so extended monitoring is unnecessary.(basic)
- The foundational three-stage model of organizational change consisting of Unfreeze, Change, and Refreeze was introduced by social psychologist Kurt _____.(basic)
- Select ALL elements that belong in a documented cyber risk assessment.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free