CompTIA CySA+ (CS0-002) — Question 360

Which of the following describes the main difference between supervised and unsupervised machine-learning algorithms that are used in cybersecurity applications?

Answer options

• A. Supervised algorithms can be used to block attacks, while unsupervised algorithms cannot.
• B. Supervised algorithms require security analyst feedback, while unsupervised algorithms do not.
• C. Unsupervised algorithms are not suitable for IDS systems, while supervised algorithms are.
• D. Unsupervised algorithms produce more false positives than supervised algorithms.

Correct answer: B

Explanation

The correct answer is B because supervised algorithms rely on labeled data and feedback from security analysts to improve their accuracy, while unsupervised algorithms work without such guidance. Options A, C, and D are incorrect as they make generalized claims that do not accurately reflect the capabilities of these algorithms in various contexts within cybersecurity.