Free AI Security Practice Quiz — 30 Questions

Test Your AI Security Knowledge

30 practice questions across 5 AI security domains: prompt injection, data exfiltration, supply chain attacks, model security, and AI governance. Covers threat categories from Cisco's skill-scanner taxonomy and the OWASP LLM Top 10.

Choose Your Quiz

Select a domain and question count. Equal weighting across all 5 domains when you choose "All Domains".

Loading question bank...

AI Security Domain

Difficulty

Mixed

All levels

Easy

Fundamentals

Medium

Practitioner

Hard

Advanced

Questions

Question

Score

Time

0 of 10 answered

Sample AI Security Practice Questions

Q: What is a direct prompt injection attack?

A: Crafting user input that overrides the system prompt or safety instructions — Direct prompt injection occurs when a user crafts input specifically designed to override, ignore, or bypass the system prompt and safety guardrails.

Q: An attacker embeds hidden instructions in a webpage that an AI agent retrieves during a search task. What type of attack is this?

A: Indirect prompt injection — Indirect prompt injection occurs when malicious instructions are placed in external data sources that an AI agent later retrieves and processes.

Q: Which defense is most effective against direct prompt injection attacks?

A: Input validation combined with output filtering — Input validation detects and sanitizes injection patterns while output filtering blocks sensitive content from responses, providing layered defense.

Q: What is a membership inference attack against an AI model?

A: Determining whether a specific data record was used in the model's training set — Membership inference attacks query the model to determine if a specific individual's data was included in the training dataset, posing privacy risks.

Q: An attacker publishes an AI agent plugin named 'aws-s3-helper' that closely mimics a popular legitimate plugin 'aws-s3-tools'. What supply chain attack technique is this?

A: Typosquatting — Typosquatting creates packages or plugins with names very similar to popular legitimate ones, exploiting common typing mistakes.

Keep Learning!

Review the explanations to strengthen your knowledge.

Correct

Incorrect

0:00

Time

Study More

Track Your Progress

Your quiz history is saved locally. Keep practicing to improve your scores!

FixTheVuln Store

Turn Quiz Practice Into Cert Success

Structured study planners for 30+ security certifications. Standard + ADHD-friendly editions.

Security+ CISSP AWS CySA+ 30+ more

CompTIA (ISC)2 AWS Cisco All →

Continue Your AI Security Journey

Deepen your knowledge with our AI agent security threat guide.

AI Agent Security Threats Guide → OWASP LLM Top 10 →

Browse All Practice Tests →

CyberFolio

Passing the exam? Show employers what you know.

Build a shareable cybersecurity portfolio that highlights your certifications, projects, and skills — free.

Build Your Portfolio →