AI0-001 AI Security Practice Question
During a security audit of an AI-powered code generation tool, the audit team discovers that the system prompt (which contains sensitive internal instructions) can be leaked through carefully crafted user inputs. Which THREE OWASP LLM Top 10 categories are MOST directly relevant to this finding?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Prompt injection
Prompt injection (direct or indirect) is the attack vector that causes the system prompt leak. Sensitive information disclosure is the consequence. Insecure output handling can also be relevant if the leak is due to improper output management. Model denial of service, supply chain vulnerabilities, and training data poisoning are not directly related to prompt leaking.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Model denial of service
Why it's wrong here
Model denial of service (LLM04) involves overwhelming the model to disrupt service, not leaking system prompts.
- ✓
Prompt injection
Why this is correct
Prompt injection (LLM01) is the direct attack technique that tricks the model into revealing the system prompt.
- ✓
Insecure output handling
Why this is correct
Insecure output handling (LLM02) can allow the leaked prompt to be returned to the user without filtering, making the leak possible.
- ✗
Supply chain vulnerabilities
Why it's wrong here
Supply chain vulnerabilities (LLM05) relate to third-party components, not to the direct mechanism of prompt leakage.
- ✓
Sensitive information disclosure
Why this is correct
Sensitive information disclosure (LLM06) occurs when the system prompt, which may contain internal instructions or secrets, is leaked to the user.
About these practice questions
One of 754 original AI0-001 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.