What disadvantage does automation in security operations face?

Question

Options

• AIt can identify all types of malware without updates
• BIt can replace human intuition and decision-making
• CIt may struggle with new and unknown threats
• DIt reduces the need for cybersecurity policies

• A
  6% (3)
• B
  2% (1)
• C
  90% (45)
• D
  2% (1)

Explanation

Automation in security operations excels at handling known, signature-based threats at scale, but it fundamentally relies on existing rules, patterns, and training data - making it poorly equipped to detect novel, zero-day, or previously unseen threats that fall outside those learned patterns. This is the core limitation captured in C.

Why the distractors are wrong:

• A is the opposite of a disadvantage - it's describing a fictional strength; real automation requires updates to identify new malware.
• B describes what automation cannot do, not a disadvantage it faces - human judgment remains essential precisely because automation can't replicate it.
• D is backwards; automation increases reliance on well-defined policies, not reduces it, since rules and policies are what automation executes.

Memory tip: Think of automation as a well-trained guard dog - excellent at recognizing known threats it was trained on, but confused by something it's never seen before. "New tricks fool old automations."

No community discussion yet for this question.