Junior interview questionAsked by candidates · YouTube
What's the difference between a jailbreak and a prompt injection?
Model answer
A jailbreak gets past the model's safety features. Prompt injection adds instructions that make the app do something unintended: typed by the user (direct), or hidden in content it reads, like a web page or email (indirect). They share techniques and overlap. Indirect injection is often worse: the victim never sees the attack.
Practise the rest
12 Prompt injection questions, 492 in all, each with a model answer. Free.
More Prompt injection interview questions
- Why is prompt injection possible at all, and why can't it be fixed the way special-token injection is?
- What is the difference between direct and indirect prompt injection? Give an example of each.
- Your assistant has no tool that sends anything. Can an injected web page still leak the user's data?
- You're designing an email assistant that reads, summarises and forwards mail. Which defences do you put in, and where?
- A reviewer says: “The system prompt forbids following instructions in emails, so the forward tool is safe, and our red-team run had zero violations.” Do you accept that?
- Do XML tags or delimiters around untrusted text stop prompt injection?