問80
頻出度★★★
物理的セキュリティ対策の不備が原因となって発生するインシデントの例として, 最も適切なものはどれか。
平成26年度 秋期 ITパスポート試験 問80
This question's explanation and your answers so far.
解説
問 80
Incorrectア
A server going down from a DoS attack happens because a huge volume of requests is sent over the network. The countermeasures are technical (logical) security measures such as blocking the traffic with a firewall or an IPS, bandwidth control, and load balancing; the cause is not a shortcoming in physical measures like locks or entry/exit management.
Incorrectイ
Information leakage caused by a PC virus infection happens when malware gets in through e-mail attachments, malicious websites, USB memory sticks, and the like. The countermeasures are technical ones such as installing anti-virus software and keeping its definition files updated, and applying patches to the OS and applications; this is not in the scope of physical security.
Incorrectウ
Data being erased by an employee's operational mistake is a problem of human (personnel security) measures, stemming from inadequate operating procedures or insufficient training. The countermeasures are preparing operating manuals, education and training, assigning privileges appropriately, and taking backups; the cause is not a shortcoming in locks or entry/exit management.
- エ
正解 エ is correct. Physical security measures are things such as lock management, entry/exit management (authentication with IC cards or biometrics), installing surveillance cameras, separating the server room into its own controlled area, and fixing equipment in place with security wires — in other words, measures that keep people and devices from physically getting close to a given place or piece of equipment. In エ, “A third party intrudes into the server room and steals data”, the cause of the incident is exactly a shortcoming in physical measures: the server room was not locked, entry/exit management was not working, or tailgating by an outsider could not be prevented. It is therefore the most appropriate example of an incident caused by inadequate physical security measures.
ここがポイント
- Security measures are classified into physical measures, technical (logical) measures, and personnel measures. Physical measures = lock management, entry/exit management, surveillance cameras, earthquake-resistant and fire-prevention facilities, and so on — things that restrict physical access to a place or to equipment.
- When you are given an incident case, sort it out by asking whether the cause is a failure to prevent someone physically entering or carrying something out, a technical hole in the communications or the equipment, or human behaviour. Intrusion into a server room, theft, and carrying equipment away are typical examples of inadequate physical measures.
用語