問50
頻出度★★★
スマートフォンの取扱いに関する記述のうち, セキュリティの観点から不適切な行動はどれか。
平成26年度 秋期 ITパスポート試験 問50
This question's explanation and your answers so far.
解説
問 50
Incorrectア
This is an appropriate action, so it cannot be the answer to a question asking for the inappropriate one. Keeping important data somewhere other than the device itself (a PC, the cloud, and so on) means the data is not lost even if the phone is lost, breaks, or is stolen, and encrypting it makes the contents hard to read even if the storage location falls into someone else's hands. Combining backup with encryption is a sound measure.
Incorrectイ
This is an appropriate action. Like a PC, a smartphone can be infected by malware (viruses, including malicious apps), so installing anti-virus software is a recommended measure and cannot be called inappropriate.
- ウ
正解 The correct answer is choice ウ. New vulnerabilities keep being discovered in an OS after the product ships, so the premise that a smartphone is at its highest security level at the time of purchase is simply wrong. Manufacturers and OS providers release security updates that fix the vulnerabilities that have been found, and if you keep using the device without applying them, it stays exposed to attacks that exploit known vulnerabilities and to malware infection. Therefore, choosing not to update the OS is inappropriate from a security standpoint. Conversely, always keeping the OS and applications up to date (applying security patches) is the basic security measure for smartphone use.
Incorrectエ
This is an appropriate action. Performing a remote forced lock or forced deletion of data (remote lock / remote wipe) when the device is lost or stolen prevents a third party from viewing or misusing the information on it. This is a standard loss countermeasure, also commonly provided by MDM (mobile device management), and is not inappropriate.
ここがポイント
- Security updates (patches) for the OS and applications exist to close vulnerabilities found after the product shipped. Keeping everything up to date is the basic security measure, and the idea that a device is safest at the moment of purchase is wrong.
- Remember the basic information-security measures for smartphones: encrypted backups kept in a separate location, anti-virus software, and remote lock / remote wipe (MDM) when the device is lost.
用語