06What is data/model poisoning, and how would you detect a backdoor introduced through fine-tuning or embedding data?▼mediumMicrosoftScaleOpenAI2 repliesunlockedPoisoning questions sort candidates who've read about backdoors from those who can name where poison enters a real pipeline, and why the embedding store is the soft target nobody audits.Open full answer →
10How do tool poisoning and prompt injection apply to MCP servers and agentic AI, and how do you defend them?▼mediumAnthropicOpenAISalesforce2 repliesunlockedMCP turned 'install a plugin' into 'inject text into every conversation.' Interviewers ask this to see if you understand why tool descriptions are an attack surface, and what a least-privilege agent runtime looks like.Open full answer →
33Your customer's developers install MCP servers freely. Build the program that secures that tool-integration supply chain.▼hardAnthropicMicrosoftGitHub1 replies◆ premiumOne backdoored MCP server can BCC every email an agent drafts, and a clean server can rug-pull its tool definitions a week after approval. This is a software supply-chain program for dependencies that talk, not a one-time review.Open full answer →