SSRF Through AI Tool Calls COASP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In the context of Server-Side Request Forgery (SSRF), what is the core mechanism that makes it a security vulnerability?

   • AThe server is tricked into making an unintended request to an internal or external resource on behalf of the attacker.
   • BThe server's DNS resolver is poisoned to return malicious IP addresses.
   • CThe client browser is tricked into sending a request to a malicious server.
   • DThe attacker directly accesses internal services by bypassing the firewall from their own machine.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security team is reviewing an AI application that uses a server-side HTTP client to fetch images from URLs provided by users. They want to assess the risk of SSRF. Which of the following is the most important factor to consider when determining the impact of an SSRF vulnerability?

   • AThe network position of the server and the sensitivity of resources reachable from it.
   • BThe number of users who have access to the AI application.
   • CThe programming language used to implement the HTTP client.
   • DThe response time of the HTTP client when making requests.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is deploying an AI agent that needs to fetch data from multiple external APIs, some of which use dynamic IP addresses. The security team wants to prevent SSRF but cannot use IP-based allowlists. Which of the following is the most effective approach?

   • AUse a deny list of known internal IP ranges.
   • BUse a domain allowlist and resolve the domain to an IP at request time, then block private IP ranges.
   • CUse a proxy that logs all requests but does not enforce restrictions.
   • DAllow all domains but require the AI model to verify the URL is safe.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   How can an attacker manipulate tool parameters to cause SSRF in an AI system?

   • ABy increasing the timeout parameter to allow longer requests.
   • BBy providing a URL parameter that points to an internal IP address, such as http://192.168.1.1/admin.
   • CBy adding a custom header to the request.
   • DBy changing the HTTP method from GET to POST in the tool call.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security analyst is explaining SSRF to a colleague. The colleague asks why AI tool calls are a prime vector for SSRF. Which reason is the most accurate?

   • AAI models are vulnerable to prompt injection, which is the same as SSRF.
   • BAI tools often execute on servers with access to internal networks, and they accept user-controlled inputs that influence URLs.
   • CAI models are trained on public data and may not understand internal network topology.
   • DAI tools are always written in Python, which has known SSRF libraries.
   Reveal Solution Discussion Select an answer first