Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Isaca AAISM Exam - Topic 3 Question 6 Discussion

Posted by Tamesha on Nov 19, 2025 at 03:53 PM

An attacker crafts inputs to a large language model (LLM) to exploit output integrity controls. Which of the following types of attacks is this an example of?

Suggested Answer: A

According to the AAISM framework, prompt injection is the act of deliberately crafting malicious or manipulative inputs to override, bypass, or exploit the model's intended controls. In this case, the attacker is targeting the integrity of the model's outputs by exploiting weaknesses in how it interprets and processes prompts. Jailbreaking is a subtype of prompt injection specifically designed to override safety restrictions, while evasion attacks target classification boundaries in other ML contexts, and remote code execution refers to system-level exploitation outside of the AI inference context. The most accurate classification of this attack is prompt injection.


AAISM Exam Content Outline -- AI Technologies and Controls (Prompt Security and Input Manipulation)

AI Security Management Study Guide -- Threats to Output Integrity

Get Premium AAISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
29 comments · newest first
AU
Audra 6 months ago
A) Prompt injection is the best choice. Clear rationale!
RE
Reid 6 months ago
D) Evasion is too vague for this.
JO
Johnna 7 months ago
C) Remote code execution? Not really.
NA
Nadine 7 months ago
I agree, A) Prompt injection makes sense.
LI
Lindy 7 months ago
Not sure about this one, seems a bit far-fetched.
AL
Alberta 8 months ago
Wait, can you really exploit LLMs like that?
IV
Ivette 8 months ago
Evasion sounds right to me, D) Evasion.
AU
Audra 8 months ago
Haha, "exploit output integrity controls"? Sounds like a fancy way to say "trick the AI into saying something bad."
KR
Kristian 8 months ago
Remote code execution? Nah, that's too advanced for this. Evasion is more likely.
TH
Theola 8 months ago
Hmm, I'd say it's a jailbreaking attempt. Gotta break out of those pesky output controls!
DE
Deonna 8 months ago
Prompt injection, for sure! That's the classic way to mess with those LLMs.
QU
Quentin 9 months ago
I feel like prompt injection is the best fit, especially since it involves crafting inputs. But what if it's more about bypassing controls?
AR
Arlene 9 months ago
Evasion sounds familiar, but I can't recall the specifics. I might be mixing it up with other types of attacks we covered.
DI
Diego 9 months ago
I remember practicing a question about jailbreaking, but I don't think that's the right answer here. It feels more like a manipulation of the input.
CE
Celeste 9 months ago
I think this might be related to prompt injection, but I'm not entirely sure. We discussed it in class, and it seemed like a common issue with LLMs.
YO
Yoko 9 months ago
Prompt injection, for sure. That's the classic way to mess with a language model's outputs. I feel pretty confident about this one - just need to make sure I explain my reasoning well in the exam.
VI
Viola 9 months ago
Ooh, this is a tricky one. I'm leaning towards evasion, where the attacker finds a way to bypass the model's integrity checks. But I'm not totally sure, so I'll have to review my notes.
SH
Sharita 10 months ago
I think it's A) Prompt injection. Seems fitting.
LE
Leila 10 months ago
I think it's more like B) Jailbreaking.
KA
Kattie 10 months ago
Definitely A) Prompt injection.
WE
Wenona 10 months ago
Remote code execution? That doesn't seem quite right for an LLM attack. I think I'm going to go with prompt injection as the best answer here. Gotta be careful with those crafty input tricks!
JU
Judy 10 months ago
B) Jailbreaking could also work, but I lean towards A.
SA
Salley 11 months ago
Hmm, I'm not sure. Could it also be a jailbreaking attack, where the attacker tries to bypass the model's safety controls? I'll have to think this through carefully.
CE
Celeste 11 months ago
This seems like a prompt injection attack, where the attacker tries to manipulate the model's output by crafting the input prompt. I'm pretty confident that's the right answer.
BA
Barrie 5 months ago
↳ replying to Celeste
I'm with you all on this one!
TR
Tran 6 months ago
↳ replying to Celeste
Prompt injection is the most likely here.
SK
Skye 6 months ago
↳ replying to Celeste
I agree, it fits the description perfectly.
DE
Delmy 6 months ago
↳ replying to Celeste
Yeah, that makes sense!
RE
Rebbecca 6 months ago
↳ replying to Celeste
I think it's definitely prompt injection.
0/2000 characters

Save Cancel