[{"data":1,"prerenderedAt":42},["ShallowReactive",2],{"q-fintech-22-028":3},{"exam":4,"examName":5,"chapterSlug":6,"question":7,"related":21},"fintech","金融科技力知識檢定","c14",{"id":8,"exam":4,"session":9,"qno":10,"question":11,"options":12,"answer":17,"chapter":18,"freq":17,"explanation":19,"difficulty":20},"fintech-22-028","22",28,"2017 年 5 月全球逾 100 個國家陸續遭到名為「想哭(WannaCry 或 WCry)」的攻擊，造成中毒電腦的所有檔案將被強制封鎖並加密，此攻擊為下列何者？",[13,14,15,16],"魚叉式攻擊","勒索病毒軟體攻擊","進階持續威脅攻擊(APT)","分散式阻斷服務攻擊(DDOS)",1,"資訊安全與風險管理","WannaCry 是 2017 年 5 月爆發的勒索病毒,利用 Windows 檔案分享協定(SMB)的漏洞在網路中自動擴散,感染後把電腦檔案加密鎖住,再要求受害者以比特幣支付贖金才提供解密,短時間內波及百餘國的醫院、企業與政府機關,故屬 (B) 勒索病毒軟體攻擊。(A) 魚叉式攻擊是針對特定對象寄送客製化釣魚信;(C) 進階持續威脅(APT)是長期潛伏、竊取機密的鎖定式攻擊;(D) 分散式阻斷服務(DDoS)以大量流量癱瘓服務,三者皆不符其加密勒索特徵。","easy",[22,25,29,33,36,39],{"id":23,"question":24,"qno":10},"fintech-19-028","下列何者非 Gartner(2014)對資安防護作法的正確敘述？",{"id":26,"question":27,"qno":28},"fintech-19-029","2017 年襲捲全球一百多個國家的「想哭(Wanna Cry)」勒索病毒，台灣金融業損失輕微，下列何者不是主要原因？",29,{"id":30,"question":31,"qno":32},"fintech-19-058","依據「金融機構使用物聯網設備安全控管規範」之規定，金融機構應建立物聯網設備管理清冊並至少多久時間更新一次，以識別設備用途、設備 IP、存放位置與管理人員，評估適當之實體環境控管措施及存取權限管制？",58,{"id":34,"question":35,"qno":10},"fintech-20-028","為加強資安犯罪之偵辦工作，減少因證據力不足而導致在法庭上爭議不斷，台灣高檢署自 2018 年起在 8 個地檢署成立何種機構？",{"id":37,"question":38,"qno":28},"fintech-20-029","對於透過資訊工具的金融犯罪，下列敘述何者錯誤？",{"id":40,"question":41,"qno":10},"fintech-21-028","下列何者最常被用來發動 DDoS？",1793070566180]