OWASP LLM and ML Top 10 (2025) Mapping to AI Threat and Governance COASP Practice Questions (Page 10)

Questions 46–48

1. 46foundation · easy

   Which of the following is a member of the OWASP Top 10 for Large Language Model Applications (2025)?

   • ALLM11: Model Theft
   • BML02: Data Poisoning
   • CML01: Unsafe Reflection
   • DLLM01: Prompt Injection
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A company is deploying an LLM-based chatbot for customer support. The chatbot has access to the company's internal knowledge base and can also place orders on behalf of customers. The security team wants to implement governance controls based on OWASP LLM Top 10. Which control is most important to implement?

   • AEncrypt all communications between the chatbot and the order system.
   • BImplement a human approval step for all orders placed by the chatbot.
   • CAdd a disclaimer that the chatbot may not be accurate.
   • DUse a more powerful LLM that is less likely to make mistakes.
   Reveal Solution Discussion Select an answer first
3. 48expert · hard

   A multinational company is deploying an LLM-based HR assistant that handles employee inquiries. The legal team is concerned about compliance with data protection regulations, and the security team wants to prevent prompt injection attacks. The company must balance user experience with security. Which governance approach best addresses both concerns?

   • AImplement strict input filtering and output filtering, and limit the assistant's access to personal data
   • BUse a more powerful LLM that is less susceptible to prompt injection
   • CDisable the assistant's ability to access any personal data, ensuring compliance
   • DRequire all users to sign a consent form before using the assistant
   Reveal Solution Discussion Select an answer first