Chatbots Chatbot Security and Privacy

Question 1

What is a prompt injection attack in the context of AI chatbots?

Accepted Answer

A technique where malicious input manipulates the chatbot to ignore its instructions and perform unintended actions

Answer

Prompt injection is an attack where crafted user input overrides or subverts the chatbot's original instructions, causing it to behave in unintended or harmful ways.

Question 2

What does PII stand for and why is it critical in chatbot security?

Accepted Answer

Personally Identifiable Information — data that can identify a specific individual and must be protected

Answer

PII stands for Personally Identifiable Information, which includes names, emails, SSNs, and similar data that chatbots must handle carefully to comply with privacy laws.

Question 3

Which security practice involves deliberately testing a chatbot for weaknesses before it is deployed to users?

Accepted Answer

Penetration testing

Answer

Penetration testing (pen testing) simulates attacks on a chatbot to discover exploitable vulnerabilities before real users can take advantage of them.

Question 4

Under GDPR, what right do EU users have regarding personal data collected by a chatbot?

Accepted Answer

The right to request deletion of their personal data ('right to be forgotten')

Answer

GDPR's 'right to be forgotten' allows users to request that their personal data be erased from the organization's systems, including chatbot conversation logs.

Question 5

What is the purpose of rate limiting in chatbot security?

Accepted Answer

To restrict the number of requests a user or bot can make in a given time period, preventing abuse and denial-of-service attacks

Answer

Rate limiting caps how many requests can be sent in a time window, protecting the chatbot from brute-force attacks, spam, and denial-of-service (DoS) attempts.

Chatbots Practice Test

Chatbots Practice Test

Chatbots Chatbot Security and Privacy