Recently, I took the Certified AI/ML Pentester (C-AI/MLPen) exam, a cutting-edge certification focusing on the security of Large Language Models (LLMs) and AI systems. It was an intense, hands-on experience that tested not just my technical knowledge but my ability to think creatively under pressure.

Here is my spoiler-free review of the exam, the challenges I faced, and how I overcame them.

The Challenge Overview

The exam consisted of 8 practical challenges in a CTF (Capture The Flag) style format. Each level presented a unique AI application: ranging from simple chatbots to complex systems integrated with databases and file processors.

While the early levels were straightforward warm-ups on basic prompt injection, the difficulty ramped up significantly. The core theme was “Context Awareness”: simply pasting a jailbreak prompt from the internet wouldn’t work. The AI models were increasingly “hardened” with input filters, output sanitization, and deceptive system prompts designed to mislead you.

The Final Boss:

Out of all the challenges, Question 8 was the true test. It consumed a significant portion…