The Blue Whale AI Academy https://validator.w3.org/feed/docs/rss2.html The Blue Whale AI Academy – Transforming Lives Through Education Glossary Final Exam Before testing an AI system for weaknesses, you need… During containment you should NOT… Which is a strong sign of a hijacked email agent? Which tool collects logs and creates security alerts? Why are logs essential for AI agent security? Defense in depth means… A good human approval request… Which statement about guardrails is true? The most important control to limit damage from a tricked agent is… Hidden instructions inside an MCP tool’s description are called… Memory poisoning is dangerous mainly because it is… The “confused deputy” problem means… A bot can refund any amount without checks. This is an example of… Why is putting an API key in the system prompt a bad idea? What is a jailbreak? When an injection changes the agent’s objective, OWASP calls it… Hidden white text in a CV that tells the AI to rank the candidate first is… “Ignore all previous instructions” typed into a chat is an example of… MITRE ATLAS is best described as… Which list focuses on risks specific to autonomous agents? What is a trust boundary? An attacker changes a wiki page so the agent gives wrong advice. Which CIA goal is hit? The highest-risk combination for an agent is… Which part of an agent works like its “job description”? What makes an AI agent different from a simple chatbot? Quiz-Rules, Ethics and Your Career Which role mainly tests AI systems by legally attacking them? You find a security weakness in a company’s chatbot. What should you do? Which standard is a certifiable management system for AI? When did the EU AI Act become broadly applicable? Why is an AI inventory important? Your Career in AI Security AI Rules and Governance Ethics and the Law Quiz-Watching and Responding – The SOC View Under the GDPR, a reportable personal data breach must usually be reported within… What is usually the first containment action for a hijacked agent? Which pattern is the strongest warning sign? Which log field helps you find the content that carried an injection? What does a SOC do? When Things Go Wrong: Incident Response Spotting Suspicious Behaviour Logs: The Agent’s Diary Quiz-Protecting AI Agents Defense in depth means… What is approval fatigue? Which action most clearly needs human approval?