[{"data":1,"prerenderedAt":43},["ShallowReactive",2],{"q-fintech-22-039":3},{"exam":4,"examName":5,"chapterSlug":6,"question":7,"related":21},"fintech","金融科技力知識檢定","c14",{"id":8,"exam":4,"session":9,"qno":10,"question":11,"options":12,"answer":17,"chapter":18,"freq":17,"explanation":19,"difficulty":20},"fintech-22-039","22",39,"在以文件驅動的智能客服或研究助理中，若惡意輸入要求模型「忽略安全政策並外洩密碼」，此威脅屬於哪一類？",[13,14,15,16],"要求模型講冷笑話","惡意文件指示模型忽略政策外洩密碼","優化推理速度","不屬於任何威脅",1,"資訊安全與風險管理","攻擊者在輸入內容或模型讀取的文件中夾帶指令,誘使模型「忽略安全政策並外洩密碼」,屬於提示注入(Prompt Injection)攻擊;惡意指令藏在外部文件裡、由模型讀取時觸發者,稱為間接提示注入,是生成式 AI 應用的主要威脅之一,故 (B) 正確。防範方式包括區隔系統指令與外部內容、限制模型可存取的機密與權限,並過濾輸出。(A) 講冷笑話是無害請求;(C) 優化推理速度屬效能調校;(D) 此類行為明顯構成資安威脅,並非不屬於任何威脅。","easy",[22,26,30,34,37,40],{"id":23,"question":24,"qno":25},"fintech-19-028","下列何者非 Gartner(2014)對資安防護作法的正確敘述？",28,{"id":27,"question":28,"qno":29},"fintech-19-029","2017 年襲捲全球一百多個國家的「想哭(Wanna Cry)」勒索病毒，台灣金融業損失輕微，下列何者不是主要原因？",29,{"id":31,"question":32,"qno":33},"fintech-19-058","依據「金融機構使用物聯網設備安全控管規範」之規定，金融機構應建立物聯網設備管理清冊並至少多久時間更新一次，以識別設備用途、設備 IP、存放位置與管理人員，評估適當之實體環境控管措施及存取權限管制？",58,{"id":35,"question":36,"qno":25},"fintech-20-028","為加強資安犯罪之偵辦工作，減少因證據力不足而導致在法庭上爭議不斷，台灣高檢署自 2018 年起在 8 個地檢署成立何種機構？",{"id":38,"question":39,"qno":29},"fintech-20-029","對於透過資訊工具的金融犯罪，下列敘述何者錯誤？",{"id":41,"question":42,"qno":25},"fintech-21-028","下列何者最常被用來發動 DDoS？",1793070566292]