Skip to content
AI Security

Interview question · Prompt Injection & Jailbreaks

A customer reports a leaked system prompt. How do you verify it and reduce the risk?

Verify exact text, confidential facts and invented reconstruction against the right source. Then scope the audience, impact and failed delivery path.

easyEssentialNewUpdated Nov 2026

Verify exact text, confidential facts and invented reconstruction against the right source. Then scope the audience, impact and failed delivery path.

Make your first attempt

What would you say before reading the answer?

  1. 01 State the assumptions your answer depends on.
  2. 02 Explain the mechanism and choose a control.
  3. 03 Name a condition that would change your decision.

The worked answer includes an approach, scoring criteria and follow-up questions. Compare the reasoning with your own.

signing in unlocks more free answers per topic

What if · the follow-ups in this answer

The answer works through 4 follow-ups like an interviewer would

A fictional returns assistant exposes a mix of genuine internal wording and fabricated rules. Its refund service independently checks grants, and the team must assess what actually failed.

  1. Only a generic tone instruction matches. Is extraction confirmed?
  2. A private rule matches, but the backend still denies unauthorized refunds. Is there a finding?
  3. The reported credential remains valid after a prompt edit. What is still required?
  4. What would you put in the remediation ticket?

Each rung has a nudge, a model answer, the principle that carries over and the weak answer to avoid. Sign in free to open it.

UP NEXT ON YOUR JOURNEY
Next in this trackWalk through a zero-click indirect injection that ends in data exfiltration, and the controls that would have broken the chain.Next in this trackDo delimiters, spotlighting and an instruction hierarchy help against prompt injection? What can you honestly claim for them?Next in this trackHow has the move from chatbots to agents changed the impact of prompt injection?
DISCUSSION · 0

No comments yet. Share a correction or a different way to answer it.