問58
頻出度★★★
不正アクセスなどに利用される, コンピュータシステムやネットワークに存在する弱点や欠陥のことを何というか。
平成26年度 秋期 ITパスポート試験 問58
テクノロジ系セキュリティ › 情報セキュリティ
This question's explanation and your answers so far.
解説
問 58
Incorrectア
An incident refers to the occurrence or event itself that threatens security, such as information leakage, unauthorized access, or a system outage. It is not a state of weakness or flaw, but the event that actually happens once such a weakness is exploited, so this is wrong. The relationship is: security hole (cause) → incident (result).
- イ
正解 The correct answer is イ, Security hole. A security hole is a security weakness (vulnerability) in a computer system or network that arises from design mistakes in the OS or applications, bugs in programs, poor configuration settings, and the like. Attackers exploit such a hole to carry out unauthorized access, malware infection, or information leakage, so it matches exactly the description in the question: a weakness or flaw that exists and is exploited for unauthorized access and similar attacks. The basic countermeasure is to close the hole by applying security patches (fix programs) or upgrading the software version.
Incorrectウ
Hacking refers to the act of working deeply with computer or network technology (malicious acts are sometimes distinguished by the separate term cracking). It is an action on the attacker's side, not a weakness or flaw existing on the system side, so this is wrong.
Incorrectエ
Forensics (digital forensics) refers to an investigative method in which electronic records such as logs and disks are preserved and analyzed after an incident occurs, in order to determine the cause or to serve as legal evidence. It is a technique for after-the-fact response, not a name for a weakness or flaw, so this is wrong.
ここがポイント
- Security hole = a weakness or flaw (vulnerability) that exists in a system or network and can be abused for unauthorized access and similar attacks. The main causes are bugs and poor configuration, and the basic countermeasure is applying security patches.
- Sorting out the confusable terms: the weakness itself = security hole; the case that occurs when it is exploited = incident; the act of attacking = hacking / cracking; preserving and analyzing evidence afterwards = digital forensics.
用語