問51
頻出度★★★
情報セキュリティの対策を, 技術的セキュリティ対策, 人的セキュリティ対策及び物理的セキュリティ対策の三つに分類するとき, 物理的セキュリティ対策に該当するものはどれか。
平成27年度 秋期 ITパスポート試験 問51
This question's explanation and your answers so far.
解説
問 51
Incorrectア
Concluding a confidentiality (non-disclosure) agreement (NDA) with employees is a “personnel security measure” that prevents information leakage by governing people’s behavior, awareness, and responsibility; it is not a physical means.
Incorrectイ
Attaching a digital signature when sending email is a “technical security measure” that uses cryptographic technology to achieve sender authenticity and tampering detection; it is not a physical means.
- ウ
正解 Among information security measures, “physical security measures” refers to measures that use physical means — such as locking, entry/exit control, and earthquake-resistant fixing — to prevent unauthorized access to physical assets such as buildings, rooms, and equipment, as well as their removal, theft, or destruction. Option ウ, “use lock management when storing notebook PCs,” uses the physical means of a lock to prevent notebook PCs from being stolen or carried out, so it exactly falls under physical security measures. Therefore the correct answer is ウ.
Incorrectエ
Periodically prompting users to change their passwords is a measure that strengthens authentication through user operation and behavior; it is classified as a personnel security measure (or technical operation), not a physical means.
ここがポイント
- Information security measures can be classified into three categories: “technical,” “personnel,” and “physical.” Physical measures use physical means such as locking, entry/exit control, and fixing equipment to prevent unauthorized access to physical assets and their theft or destruction.
- Remember this mapping: lock management and entry/exit control = physical; encryption and digital signatures = technical; concluding agreements, education/training, and enforcing password operation = personnel.
用語