Top 3 Prompt injection Interview Questions
Browse 3 real-world technical and behavioral interview questions about Prompt injection. Review scenarios, edge cases, and architectural best practices.
Your team wants to expose internal systems to an agent through MCP servers. What does the Model Context Protocol standardise, and what does it leave you to secure?
The Model Context Protocol standardises how an AI host discovers and calls tools, reads resources and fetches prompts from servers, with OAuth-based authorisation for HTTP. It states safety principles but cannot enforce them, so per-call authorisation, tool approval and prompt injection via tool output stay your job.
What is indirect prompt injection, and how would you defend an assistant that reads user-supplied documents?
Indirect prompt injection is when instructions hidden in content the model reads are followed as if they came from you. Instructions and data share one token sequence, so there is no complete fix and the defence is architectural: least-privilege tools, filtered output, and human approval for side effects. It also connects llm security to the point an interviewer is testing.
What belongs in the system prompt, and what belongs in the user turn?
The system prompt holds what is identical on every request - role, policy, output contract, tool schemas, examples. Anything varying by user or request, retrieved documents included, belongs in the turns below, to keep the cached prefix stable and untrusted text away from system authority. It also connects prompt caching to the point an interviewer is testing.