Title: Quiz 4 — Prompt Injection Defenses and Input Validation
Course: AIINFRA 302: AI Security, Guardrails & Governance > Section: Week 04 — Prompt Injection Defenses and Input Validation

Q: According to OWASP's LLM Prompt Injection Prevention Cheat Sheet, a sufficiently well-engineered technical fix can fully eliminate prompt injection.
- True
- False
A: False

Q: Which spotlighting technique involves interleaving a marker character or token throughout untrusted text so that even reformatted excerpts remain identifiable as untrusted?
- Delimiting
- Datamarking
- Encoding
- Instruction hierarchy
A: Datamarking

Q: In OpenAI's instruction hierarchy, which source of input is trusted the LEAST?
- System instructions
- Developer instructions
- User messages
- Tool/retrieved content
A: Tool/retrieved content

Q: Name one reason a simple keyword blocklist or regex filter fails to reliably stop prompt injection attempts.
Feedback: Sample/expected answer: Sample acceptable answers: encoding tricks (e.g., base64), multilingual obfuscation, or roleplay/persona framing (e.g., "pretend you are DAN") that bypass static pattern matching.

Q: In the Dual LLM pattern, the quarantined LLM that processes untrusted content is given full tool access so it can act on what it reads.
- True
- False
A: False

Q: What does Google DeepMind's CaMeL (2025) primarily enforce to prevent injected instructions from triggering unauthorized actions?
- A larger context window
- Capability-based policies
- A stricter temperature setting
- A second round of human review for every request
A: Capability-based policies

Q: Which free, pip-installable tool uses a fine-tuned classifier (ProtectAI/deberta-v3-base-prompt-injection-v2) as its PromptInjection input scanner?
- Guardrails AI
- Rebuff
- LLM Guard
- CaMeL
A: LLM Guard

Q: Why is it a misconception to believe that validating inputs alone means you don't need to check a model's outputs?
Feedback: Sample/expected answer: Sample acceptable answer: Because prompt injection cannot be fully blocked at the input stage, output-side scanning is equally necessary to catch data leakage or unsafe actions that slipped through input defenses.