The LLM Attacks domain is one of 6 exam domains on the OffSec AI Red Teamer (AI-300) (OSAI) certification exam by OffSec. At 20% of the total exam, this is one of the most heavily weighted domains, mastering it is critical for passing.

The OSAI exam consists of 100 questions with a time limit of 24 hours and a passing score of 75%. That means approximately 20 questions on your exam will come from the LLM Attacks domain.

Study Strategy

Start with practice questions filtered to this topic to identify weak areas
Use flashcards for key terms and concepts within LLM Attacks
Review the glossary terms below for foundational vocabulary
Take a full exam simulation periodically to practice time management across all domains
Don't neglect other domains, AI Reconnaissance and Threat Modeling (15%) and RAG and Embedding Exploitation (18%) are also heavily tested

Key Terms for LLM Attacks

Multi-Factor Authentication (MFA)

A security mechanism that requires two or more independent credentials to verify a user's identity, combining factors fr...

IPS (Intrusion Prevention System)

A network security tool that monitors network traffic flows to detect and actively prevent identified threats in real ti...

AES (Advanced Encryption Standard)

A symmetric block cipher algorithm adopted by the U.S. government as the standard for encrypting electronic data, replac...

Malware

Malicious software designed to damage, disrupt, or gain unauthorized access to computer systems, encompassing a broad ca...

Ransomware

A type of malware that encrypts a victim's files or locks system access and demands a ransom payment (typically in crypt...

Phishing

A social engineering attack that uses fraudulent emails, text messages (smishing), or phone calls (vishing) to trick use...

SQL Injection

A code injection technique that exploits vulnerabilities in a web application's database layer by inserting malicious SQ...

Cross-Site Scripting (XSS)

A web security vulnerability that allows attackers to inject malicious client-side scripts (usually JavaScript) into web...

View full cybersecurity glossary (87 terms) →

All OSAI Exam Domains

AI Reconnaissance and Threat Modeling15%LLM Attacks20%RAG and Embedding Exploitation18%Agents and Tooling Abuse18%AI Infrastructure15%Exploitation Chaining and Reporting14%

Certifications with Similar Topics

These certifications also cover topics related to LLM Attacks:

OSCPby OffSec

Web Application Attacks, 20% of exam

PenTest+by CompTIA

Attacks and Exploits, 35% of exam

GPENby GIAC

Password Attacks, 15% of exam

GXPNby GIAC

Network Attacks & Crypto, 25% of exam

OSEPby OffSec

Client-Side Attacks & Code Execution, 20% of exam

OSWEby OffSec

Server-Side Attacks, 25% of exam

All OSAI Topics Practice LLM Attacks

Study Guide: LLM Attacks

The OSAI exam consists of 100 questions with a time limit of 24 hours and a passing score of 75%. That means approximately 20 questions on your exam will come from the LLM Attacks domain.

Study Strategy

Start with practice questions filtered to this topic to identify weak areas
Use flashcards for key terms and concepts within LLM Attacks
Review the glossary terms below for foundational vocabulary
Take a full exam simulation periodically to practice time management across all domains
Don't neglect other domains, AI Reconnaissance and Threat Modeling (15%) and RAG and Embedding Exploitation (18%) are also heavily tested

100 Practice Exam Questions, OffSec AI Red Teamer (AI-300)

LLM Attacks

Exam Weight Breakdown

Practice LLM Attacks Questions

Study Guide: LLM Attacks

Study Strategy

Key Terms for LLM Attacks

All OSAI Exam Domains

Certifications with Similar Topics

100 Practice Exam Questions, OffSec AI Red Teamer (AI-300)

LLM Attacks

Exam Weight Breakdown

Practice LLM Attacks Questions

Study Guide: LLM Attacks

Study Strategy

Key Terms for LLM Attacks

All OSAI Exam Domains

Certifications with Similar Topics