AI0-001 AI Security Practice Question
A company deploys an LLM-based chatbot that retrieves data from external databases. An attacker embeds malicious instructions in a database record. When the chatbot retrieves that record, it executes the instructions, overriding its system prompt. Which type of attack is this?
⚠ Common exam trap
The AI0-001 exam often tests the distinction between direct and indirect prompt injection by making the attack vector (user input vs. external data source) the key differentiator, so candidates must identify where the malicious instructions originate.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Indirect prompt injection
This is an indirect prompt injection attack because the malicious instructions are embedded in a third-party data source (the database record) rather than being sent directly by the user. When the LLM retrieves and processes that record, the injected instructions override the system prompt, causing the chatbot to behave contrary to its intended design.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Model inversion attack
Why it's wrong here
Model inversion reconstructs training data, not prompt manipulation.
- ✓
Indirect prompt injection
Why this is correct
The malicious instructions are embedded in the retrieved data, making it indirect.
- ✗
Direct prompt injection
Why it's wrong here
Direct prompt injection comes from the user's input, not from retrieved content.
- ✗
Membership inference attack
Why it's wrong here
Membership inference determines if data was in training set, not prompt manipulation.
About these practice questions
One of 754 original AI0-001 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.