問81
頻出度★★★
職場でのノートPCの管理に関する記述①～④のうち，盗難防止対策として，適切なものだけを全て挙げたものはどれか。 ① OSのログインパスワードを設定する。 ② PCをチェーンで施錠固定する。 ③ 帰宅時は施錠可能なキャビネットに保管する。 ④ 離席時にはパスワードロックを行う。
平成25年度 春期 ITパスポート試験 問81
This question's explanation and your answers so far.
解説
問 81
Incorrectア
The combination ①, ③. Storing the PC in a lockable cabinet (③) is correct as a theft-prevention measure, but setting the OS login password (①) is not. A login password is a means of identity verification meant to stop someone who tries to start up the PC and use the data or functions inside it; it has no deterrent effect whatsoever on the act of carrying the PC itself away from the desk. It does have the effect of reducing information leakage after a theft, but it is not a measure that prevents the theft itself. Furthermore, this option leaves out ②, which is also a theft-prevention measure, so it fails the condition of listing all and only the appropriate items.
- イ
正解 The correct answer is イ, ②, ③. This question does not ask about measures for protecting information in general; it asks only for theft-prevention measures, that is, measures that keep the notebook PC itself — a physical piece of equipment — from being carried away. Item ②, locking and fixing the PC in place with a chain, means fastening it to a desk or a piece of furniture with what is called a security cable (security wire) so that it cannot physically be removed from that spot; this is a typical theft-prevention measure. Item ③, storing the PC in a lockable cabinet when going home, is lock management that puts the PC away in a locked place during the hours when nobody is around, and it too prevents the removal itself. Items ① (setting the OS login password) and ④ (applying a password lock when leaving your seat), by contrast, are measures against unauthorized use and information leakage — the practice of clear screen — that keep others from seeing the screen or operating the PC without permission; they cannot stop the PC itself from being carried off. Therefore only ② and ③ are appropriate as theft-prevention measures, and イ, the combination of the two, is correct.
Incorrectウ
The combination ②, ③, ④. Items ② and ③ are correct, but ④, applying a password lock when leaving your seat, is superfluous. A password lock is the practice of clear screen, which keeps others from looking at the screen or operating the PC while you are away from your desk, and it falls under measures against unauthorized use and information leakage. Even when the PC is locked, the machine itself is still sitting on the desk, so the lock cannot stop anyone who intends to carry it away. Since this question asks for theft-prevention measures only, ウ, which includes ④, cannot be chosen.
Incorrectエ
The combination ②, ④. Locking and fixing the PC with a chain (②) is correct as a theft-prevention measure, but applying a password lock when leaving your seat (④) is, as explained above, a measure against unauthorized use rather than against theft. In addition, this option drops ③, storing the PC in a lockable cabinet when going home, which is clearly a theft-prevention measure. Against the condition of listing all and only the appropriate items, it therefore has both an omission and a superfluous item.
ここがポイント
- Classify information security measures by their purpose. Theft-prevention measures are those that physically keep the equipment itself from being carried away — locking it down with a security cable or a chain, storing it in a lockable cabinet or cupboard, controlling entry to and exit from rooms, and so on. Password authentication, by contrast, is a logical measure that prevents unauthorized use and access, not removal. Not confusing these two is the core of this question.
- Clear desk and clear screen: a password lock when you leave your seat, or an automatic screen lock, counts as clear screen, and it prevents information leakage caused by someone peeking at or operating the machine without permission. Clear desk — tidying away the documents and notebook PCs on your desk and storing them under lock when you leave for the day — prevents information leakage and at the same time works as theft prevention. Keep in mind that setting a password is only insurance that reduces information leakage after a theft; it cannot prevent the theft from occurring in the first place.
用語