問58
頻出度★★★
情報セキュリティの観点から，システムの可用性を高める施策の例として，最も適切なものはどれか。
平成27年度 秋期 ITパスポート試験 問58
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 58
Incorrectア
Adopting biometric authentication is a measure that strengthens “identity verification (authentication),” helping to prevent impersonation and ensure confidentiality. It does not keep the system from stopping, so it is not a measure to improve availability.
Incorrectイ
A digital signature is a measure that guarantees data has not been tampered with (integrity) and that the creator is genuine (authenticity). It protects the correctness of data and does not directly contribute to keeping the system running, i.e., availability.
Incorrectウ
Data encryption is a measure that protects “confidentiality” so that the content cannot be read even if it is peeked at. It is a countermeasure against information leakage to third parties, and it does not improve availability, i.e., the state in which the system can continue to be used.
- エ
正解 Among the three elements of information security, “availability” means keeping the state in which authorized users can use the system and data whenever they need them. “エ Make the hardware redundant (duplicated)” is a measure that adds redundancy so that even if one unit fails, operation can continue by switching to the other, keeping the system running and usable. This is precisely a representative example of improving availability, so it is the most appropriate.
ここがポイント
- The three elements of information security (CIA): confidentiality, integrity, and availability. Think by mapping each measure to the element it protects.
- Representative measures for improving availability are redundancy (duplication), multiplexing, backup, an uninterruptible power supply, and other mechanisms that “do not stop / can recover quickly.”
用語