For Individuals
For Companies
Events
About
Contact
LOGIN

Skip to content

LLM Security: Defending Applications Against Injection, Leakage and Model Abuse

The Threat Model for Applications Built on Language Models

Quiz: The Threat Model for Applications Built on Language Models

Where the OWASP Top 10 for LLM Applications Fits

Quiz: Where the OWASP Top 10 for LLM Applications Fits

Direct Prompt Injection and Instruction Hierarchy Defences

Quiz: Direct Prompt Injection and Instruction Hierarchy Defences

Indirect Injection From Documents, Web Pages and Email

Quiz: Indirect Injection From Documents, Web Pages and Email

Sanitising and Isolating Untrusted Content in Context

Quiz: Sanitising and Isolating Untrusted Content in Context

Sensitive Data Disclosure and Preventing Context Bleed

Quiz: Sensitive Data Disclosure and Preventing Context Bleed

System Prompt Leakage and Why Secrets Do Not Belong There

Quiz: System Prompt Leakage and Why Secrets Do Not Belong There

Excessive Agency: Scoping Tools, Permissions and Blast Radius

Quiz: Excessive Agency: Scoping Tools, Permissions and Blast Radius

Supply Chain: Model Weights, Datasets and Plugin Provenance

Quiz: Supply Chain: Model Weights, Datasets and Plugin Provenance

1 of 2

Previous Lesson

Quiz: Indirect Injection From Documents, Web Pages and Email

LLM Security: Defending Applications Against Injection, Leakage and Model Abuse
Indirect Injection From Documents, Web Pages and Email
Quiz: Indirect Injection From Documents, Web Pages and Email

Time limit: 0

Quiz Summary

0 of 5 Questions completed

Questions:

Information

You have already completed the quiz before. Hence you can not start it again.

Quiz is loading…

You must sign in or sign up to start the quiz.

You must first complete the following:

Results

Quiz complete. Results are being recorded.

Results

0 of 5 Questions answered correctly

Your time:

Time has elapsed

You have reached 0 of 0 point(s), (0)

Earned Point(s): 0 of 0, (0)
0 Essay(s) Pending (Possible Point(s): 0)

Categories

Not categorized 0%

Review
Answered
Correct
Incorrect

Question 1 of 5

1. Question

What is a common method used by attackers to exploit document-based injection attacks?

Sending emails with malicious attachments that appear legitimate
Correct Incorrect Correct answer

Creating web pages with hidden JavaScript code
Correct Incorrect Correct answer

Using social engineering to trick users into clicking links
Correct Incorrect Correct answer

Exploiting vulnerabilities in network protocols
Correct Incorrect Correct answer

Correct / 1 Points

Incorrect / 1 Points
Question 2 of 5

2. Question

Which of the following is a recommended practice to prevent web page injection vulnerabilities?

Allowing all user input without validation or sanitisation
Correct Incorrect Correct answer

Using output encoding at every point where user data is rendered
Correct Incorrect Correct answer

Disabling all security features in web frameworks
Correct Incorrect Correct answer

Storing user input directly into databases without checks
Correct Incorrect Correct answer

Correct / 1 Points

Incorrect / 1 Points
Question 3 of 5

3. Question

What type of content in emails can be exploited by attackers to compromise systems?

Plain text messages from trusted senders
Correct Incorrect Correct answer

HTML content that triggers automatic downloads or script execution
Correct Incorrect Correct answer

Attachments that are scanned by antivirus software
Correct Incorrect Correct answer

Email headers that contain standard formatting
Correct Incorrect Correct answer

Correct / 1 Points

Incorrect / 1 Points
Question 4 of 5

4. Question

Why is it important for organisations to implement logging and monitoring for injection attempts?

To reduce the cost of security software
Correct Incorrect Correct answer

To identify patterns that indicate potential injection attacks
Correct Incorrect Correct answer

To increase the speed of email delivery
Correct Incorrect Correct answer

To allow users to access blocked content
Correct Incorrect Correct answer

Correct / 1 Points

Incorrect / 1 Points
Question 5 of 5

5. Question

What should organisations do to protect against email-based injection exploits?

Allow automatic downloads and script execution by default
Correct Incorrect Correct answer

Validate and sanitize HTML content before email delivery
Correct Incorrect Correct answer

Disable all email filtering systems
Correct Incorrect Correct answer

Avoid using any HTML in email communications
Correct Incorrect Correct answer

Correct / 1 Points

Incorrect / 1 Points

Login

Accessing this course requires a login. Please enter your credentials below!

Username or Email Address

Password

Remember Me

Continue with Facebook

Continue with Google

Lost Your Password?

Register

Don't have an account? Register one!

Register an Account

Ready to Lead the AI Revolution?

Join hundreds of executives transforming their careers with Tesseract Academy.

Explore Individual Learning

© 2026 Tesseract Academy. All Rights Reserved.