‹ All AI-300 questions

AI-300 Practice Question 69: Prompt Shields Indirect Attack

Microsoft Machine Learning Operations Engineer Associate (AI-300) · Test 7 · question 9 of 10

Implement generative AI quality assurance and observabilitymedium

A RAG assistant summarizes emails and web pages. An attacker hides text in a retrieved document that tells the model to ignore its system prompt and reveal confidential data. Which content safety capability is designed to detect this kind of attack?

Select one answer
Show answer and explanation

Answer:

  • D. Prompt Shields, with document (indirect attack) detection turned on

Prompt Shields detects two kinds of adversarial input: user prompt attacks (jailbreaks) and document attacks, also called indirect attacks, where malicious instructions are embedded in content the model is asked to process. The document detection targets the scenario in the question (option D).

- A is wrong because this feature flags known copyrighted text such as lyrics or articles. It does not look for instructions hidden in documents. - B is wrong because these thresholds score harmful language. A hidden instruction can be written in perfectly polite words. - C is wrong because attackers can rephrase the instruction endlessly, so an exact-match list cannot reliably detect it.

Reference: Prompt Shields in Microsoft Foundry

Practice Test 7 ›

Study guides for AI-300