問45
頻出度★☆☆
情報システムの安全性を維持・保全するための施策のうち, 情報システム設備の施策に該当するものはどれか。
平成26年度 春期 ITパスポート試験 問45
マネジメント系サービスマネジメント › ファシリティマネジメント
This question's explanation and your answers so far.
解説
問 45
- ア
正解 The correct answer is ア. Safety measures for an information system can be broadly divided into facility (physical equipment) measures, data and software measures, and operational and organizational measures. Facility measures are those that protect the physical infrastructure, such as the building that houses the computers and the power supply, air conditioning, and fire prevention equipment. An on-site generator is equipment that generates electricity and keeps supplying power to the system even when commercial power is cut off by a blackout or a disaster, so it is exactly a measure aimed at the information system facilities themselves. A typical configuration combines it with an uninterruptible power supply (UPS), which covers short outages: the UPS carries the system through the momentary interruption while the on-site generator starts up. Both are representative availability measures on the facility side.
Incorrectイ
Taking backups of data is a data-side measure that makes restoration possible when data is corrupted or lost; it is not a measure that protects the facilities themselves. It is an important safety measure, but it does not correspond to a measure for information system facilities, which is what the question asks about.
Incorrectウ
A function that automatically starts the computer at a set time is a mechanism for automating operations and improving convenience, so that jobs such as nighttime batch processing can run unattended. It is not a facility measure whose purpose is to maintain and preserve safety.
Incorrectエ
Encrypting the data flowing over the network is a communication- and data-side security measure for preventing information leakage caused by eavesdropping. It is a measure that protects confidentiality, not a measure for facilities such as the power supply or the building.
ここがポイント
- Safety measures for an information system can be classified from the viewpoints of facilities (buildings, power supply, air conditioning, fire prevention, entry and exit control), data and software (backups, access control, encryption), and operations and organization (rules, training, audits). Identify which viewpoint the question is asking about.
- A representative availability measure on the facility side is power supply countermeasures: an uninterruptible power supply (UPS) for momentary outages is used in combination with an on-site generator for long outages.
用語