問81
頻出度★★★
システムのアクセスに使用している通信ケーブルを誤って切断した。このとき, 情報セキュリティのマネジメント要素のうち, どれが低下したことになるか。
平成21年度 秋期 ITパスポート試験 問81
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 81
- ア
正解 The three elements of information security (CIA) are confidentiality (only authorized people can access the information), integrity (the information is accurate and has not been tampered with), and availability (the information can be used when needed). When the communication cable is accidentally cut, the system cannot be reached, so users cannot use it when they want to. The data itself is neither leaked nor altered; only the ability to use it is impaired. Therefore what has been degraded is availability, and the correct answer is ア.
Incorrectイ
Integrity is the property that information is accurate and complete, with no tampering or corruption. Even if the cable is cut, the content of the data on the server is not altered, so integrity has not been degraded.
Incorrectウ
Confidentiality is the property that only authorized people can access the information. Cutting the cable does not cause information to leak; it merely makes access impossible, so this is not a loss of confidentiality.
Incorrectエ
Maintainability (hozensei in the original Japanese) is not one of the three elements of information security; here it is a deliberately confusing choice. The question asks about the information security management elements, so the answer must be one of confidentiality, integrity, or availability.
ここがポイント
- The three elements of information security (CIA): Confidentiality, Integrity, and Availability. Learn them by matching which kind of incident damages which element.
- Typical examples that damage availability are a cut cable, a power outage, equipment failure, or a DoS attack — events where you cannot use the system when you want to. Leakage corresponds to confidentiality, and tampering or data corruption to integrity.
用語