AI-assisted Security

What this chapter covers

AI-assisted Security is 24% of the CompTIA SecAI+ CY0-001 exam. Where the previous domain protects artificial intelligence (AI) systems, this one uses AI as a security tool and shows how attackers use it against you.

It covers AI-enabled tools (integrated development environment, browser and command-line plug-ins, chatbots, personal assistants and Model Context Protocol servers) and their use cases (signature matching, code quality, vulnerability analysis, automated penetration testing, anomaly detection, pattern recognition, incident management, threat modeling, fraud detection, translation and summarization), AI-enhanced attacks (deepfakes, impersonation, misinformation and disinformation, adversarial networks, reconnaissance, social engineering, obfuscation, automated attack generation, malware, honeypots and distributed denial of service) and automation (low-code and no-code scripting, document synthesis, ticket and change management, AI agents and continuous integration and continuous deployment pipelines).

The exam has a maximum of 60 multiple-choice and performance-based questions in 60 minutes. Questions are vendor-neutral and usually close with "Which of the following ...?". Expect scenarios that ask which tool or use case fits a task, or which AI technique an attacker most likely used.

How the topics fit together

Tools and use cases show AI speeding up defenders, and the attack page shows the same capabilities in an adversary's hands. Automation comes last because it combines tools, agents and pipelines, and needs the strongest controls on what AI is allowed to change.

How to use these pages

Each topic page has the same shape, so you can skim for what you need.

• What it is: the idea in plain words.
• How it works: the mechanism, with tables and code examples.
• What to remember for the exam: the facts to memorise and how questions are phrased.
• Common mistakes: the classic traps.
• Check yourself: three questions to test your understanding.