Courseiva
AI and Network OperationsmediumMultiple SelectObjective-mapped

CCNA Behavioral analysis Practice Question

Which three of the following are typical use cases for automation in network security operations? (Choose three.)

⚠ Common exam trap

Candidates may confuse plausible automation with overhyped AI claims. The trap is that while AI/ML can enhance security, options like 'guaranteeing zero false positives' or 'replacing all rules with one AI rule' are unrealistic. The correct answers focus on practical, risk-aware automation that complements existing security controls.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Automated identification and blocking of previously unseen malware variants using behavioral analysis

The three correct options represent realistic automation use cases in network security operations. Automated identification and blocking of malware variants using behavioral analysis leverages machine learning to detect zero-day threats without relying on signatures. Correlating authentication logs with network flows allows security teams to identify lateral movement by spotting anomalous access patterns, which is a key technique in threat hunting. Dynamic micro-segmentation adjusts policies in real-time based on endpoint risk scores, enabling instant isolation of compromised devices. The incorrect options are unrealistic: a single AI-generated rule cannot cover all traffic, AI cannot guarantee zero false positives, and disabling all ports on any anomaly would cause denial of service.

About these practice questions

One of 1,389 original 200-301 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.