Chatbots Chatbot Security and Privacy 3

Question 1

What is adversarial input in chatbot security?

Accepted Answer

Specially crafted user messages designed to cause the chatbot to malfunction, reveal sensitive data, or produce harmful outputs

Answer

Adversarial inputs are deliberately engineered to exploit weaknesses in a chatbot's model or logic, often to bypass filters, extract hidden information, or generate unsafe content.

Question 2

What is session hijacking in the context of a chatbot application?

Accepted Answer

An attacker stealing a valid session token to impersonate an authenticated user and access their chatbot conversation

Answer

Session hijacking occurs when an attacker obtains a user's session token (via XSS, network sniffing, etc.) and uses it to impersonate that user in subsequent chatbot interactions.

Question 3

How does input sanitization protect a chatbot from security threats?

Accepted Answer

It strips or escapes dangerous characters and patterns from user input before the chatbot or backend systems process it

Answer

Input sanitization removes or neutralizes characters and sequences (like SQL operators or script tags) that could be exploited in injection or XSS attacks before they reach backend systems.

Question 4

What role does audit logging play in chatbot security?

Accepted Answer

It creates a tamper-evident record of all chatbot interactions and system events, enabling forensic analysis after a security incident

Answer

Audit logs provide an immutable record of who did what and when, which is essential for investigating breaches, meeting compliance requirements, and detecting anomalous behavior.

Question 5

Which US state regulation specifically governs data privacy rights for residents using chatbots and online services?

Accepted Answer

CCPA (California Consumer Privacy Act)

Answer

CCPA grants California residents rights over their personal data collected by businesses, including chatbots — such as the right to know, delete, and opt out of data sale.

Chatbots Practice Test

Chatbots Practice Test

Chatbots Chatbot Security and Privacy 3