Top 3 Llm security Interview Questions
Browse 3 real-world technical and behavioral interview questions about Llm security. Review scenarios, edge cases, and architectural best practices.
How do you handle personal data in prompts, logs and traces for an LLM feature?
Decide what may cross the provider boundary and redact before it does, checking the provider's retention and training-use terms rather than assuming them. Then treat the debugging trace as a second copy of user data, with its own retention, access control and deletion obligations.
What is indirect prompt injection, and how would you defend an assistant that reads user-supplied documents?
Indirect prompt injection is when instructions hidden in content the model reads are followed as if they came from you. Instructions and data share one token sequence, so there is no complete fix and the defence is architectural: least-privilege tools, filtered output, and human approval for side effects. It also connects llm security to the point an interviewer is testing.
You are shipping an agent that can call tools. How do you stop it exfiltrating data?
Assume the agent's context can be manipulated and control the exits instead. Scope each tool to the least data it needs, resolve the caller's identity in the executor rather than from a model-supplied argument, treat generated arguments as hostile input, and allow-list egress destinations.