AI0-001 AI Security Practice Question
A security analyst at a fintech company is alerted to anomalous API requests to their deployed LLM chatbot. The requests contain carefully crafted inputs that cause the model to generate responses that include internal system prompts. Which type of attack is MOST likely occurring?
⚠ Common exam trap
The AI0-001 exam often tests the distinction between attacks that target training data (poisoning, inversion, membership inference) versus attacks that exploit the inference-time behavior of LLMs, leading candidates to confuse prompt injection with data poisoning.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Prompt leaking via indirect prompt injection
The attack exploits the LLM's inability to distinguish between user-supplied instructions and system-level prompts. By crafting inputs that include hidden or indirect instructions, the attacker causes the model to output its internal system prompt, which is a classic prompt leaking scenario achieved via indirect prompt injection.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Data poisoning attack
Why it's wrong here
Data poisoning involves corrupting training data to manipulate model behavior, not extracting system prompts from a deployed model.
- ✓
Prompt leaking via indirect prompt injection
Why this is correct
Prompt leaking occurs when an adversary forces the model to output its system prompt, often through indirect injection in user-supplied data.
- ✗
Membership inference attack
Why it's wrong here
Membership inference determines if a specific record was used in training, not extracting prompts from the model's response.
- ✗
Model inversion attack
Why it's wrong here
Model inversion aims to reconstruct private training data from model outputs, not to steal system prompts.
About these practice questions
One of 754 original AI0-001 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.