Chatbots Chatbot Security and Privacy 2

Question 1

What is 'jailbreaking' in the context of AI chatbots?

Accepted Answer

Using crafted inputs to bypass a chatbot's safety guardrails and make it produce restricted content

Answer

Releasing a chatbot from a proprietary platform to run on open-source infrastructure

Answer

Fixing bugs that prevent a chatbot from being deployed

Answer

Migrating chatbot data from one cloud provider to another

Question 2

What is data minimization as applied to chatbot privacy?

Accepted Answer

Collecting only the minimum amount of user data necessary to fulfill the chatbot's purpose

Answer

Compressing conversation logs to save storage space

Answer

Deleting all user data after each session automatically

Answer

Limiting the number of questions a chatbot can ask per session

Question 3

Which compliance standard is most relevant for chatbots that handle credit card payment information?

Accepted Answer

PCI DSS (Payment Card Industry Data Security Standard)

Answer

HIPAA (Health Insurance Portability and Accountability Act)

Answer

SOX (Sarbanes-Oxley Act)

Answer

FERPA (Family Educational Rights and Privacy Act)

Question 4

What does end-to-end encryption (E2EE) protect in a chatbot communication channel?

Accepted Answer

It ensures that only the user and the intended recipient can read the messages, preventing interception by third parties including the service provider

Answer

It verifies the identity of the user before starting a conversation

Answer

It prevents the chatbot from storing any conversation history

Answer

It automatically deletes messages after they are read by the chatbot

Question 5

What is a common security vulnerability when a chatbot is tightly integrated with a backend database?

Accepted Answer

SQL injection, where malicious input is passed to database queries and alters their behavior

Answer

Excessive API calls that slow down the database

Answer

Incorrect grammar in database queries causing slow responses

Answer

The chatbot caching outdated records from the database

Question 6

Why is it important for a chatbot to have a clearly visible privacy policy?

Accepted Answer

It informs users about what data is collected, how it is used, and their rights — which is legally required under regulations like GDPR and CCPA

Answer

It improves the chatbot's NLP accuracy by clarifying user intent

Answer

It reduces the chatbot's server load by filtering unnecessary queries

Answer

It allows the chatbot to charge users for premium data features

Question 7

Which authentication approach is considered most secure for protecting chatbot API endpoints?

Accepted Answer

OAuth 2.0 with short-lived access tokens and refresh token rotation

Answer

HTTP Basic Authentication with username and password

Answer

IP whitelisting as the sole security measure

Answer

Using a shared static API key with no expiration