問73
頻出度★★★
情報セキュリティにおけるクラッキングの説明として, 適切なものはどれか。
平成27年度 秋期 ITパスポート試験 問73
テクノロジ系セキュリティ › 情報セキュリティ
This question's explanation and your answers so far.
解説
問 73
Incorrectア
Durability tests such as impact, pressure, dropping, and vibration are quality inspections that verify the physical reliability of equipment, and have nothing to do with breaking into a computer. This is not a description of cracking, which is an attacking act in information security.
- イ
正解 Cracking refers to maliciously breaking into another person’s computer or system to peek at, tamper with, or destroy data, and the like. Choice イ matches this definition exactly, stating that one “maliciously breaks into a computer to peek at data or carry out destruction, and the like”, so it is correct. The essence that characterizes cracking is abusing technical knowledge to cause harm.
Incorrectウ
A system administrator performing configuration and maintenance of information equipment, such as setting up a firewall, is legitimate operations-management work. It is in fact the work of the defending side that protects against attacks, and is the exact opposite of cracking, which is a malicious unauthorized intrusion.
Incorrectエ
An audit to confirm whether security measures are working effectively is a legitimate evaluation activity (a security audit) that inspects the organization’s defensive posture, not an attacking act. It does not amount to a description of cracking.
ここがポイント
- Cracking = an illicit act of maliciously breaking into a computer or system to peek at, tamper with, or destroy data, and the like. Its essence is abusing technical skill to do harm.
- Distinguish between the legitimate work of the defending side (an administrator’s configuration and maintenance, a security audit) or physical durability tests, and the illicit act of the attacking side (cracking).
用語