問75
頻出度★★★
コンピュータウイルスに関する次の記述中の a，b に入れる字句の適切な組合せはどれか。 OSやアプリケーションの [ a ] を突くようなウイルスの感染予防には，ウイルス定義ファイルを最新の状態に保つことや [ b ] が必要である。
平成27年度 秋期 ITパスポート試験 問75
テクノロジ系セキュリティ › 情報セキュリティ
This question's explanation and your answers so far.
解説
問 75
Incorrectア
b is correct, but a = threat is wrong. A threat is the general term for a cause or factor that brings damage; it is not what a virus directly “exploits”. What is exploited is ultimately the vulnerability, which is the weakness — so a does not fit and the choice is inappropriate.
Incorrectイ
a = threat is wrong (what is exploited is the vulnerability). In addition, b = encrypt the hard disk is a measure to prevent data from being read by others (confidentiality) when a device is stolen or lost; it does nothing to prevent infection by viruses that exploit a vulnerability. Both a and b are wrong.
- ウ
正解 ウ is correct. What a virus “exploits” is the [ a ] = vulnerability (security hole) hidden in the OS or applications — that is, a flaw in the program or a weakness in its design. To prevent infection that abuses this weakness, besides keeping the virus definition file up to date so that known viruses are detected, it is necessary to [ b ] = apply security patches to the OS and applications, thereby closing the vulnerability itself. Therefore the combination a = vulnerability, b = apply security patches — choice ウ — is appropriate.
Incorrectエ
a = vulnerability is correct, but b = encrypt the hard disk is wrong. Encryption is a measure against data leakage; it has no effect of closing the vulnerability to prevent infection. Applying security patches is what is needed to prevent infection.
ここがポイント
- A vulnerability (security hole) is a flaw or weakness in a program — the thing that viruses and attackers “exploit”. Do not confuse it with a threat (a factor that causes damage).
- The basics of preventing virus infection are keeping the virus definition file up to date and fixing vulnerabilities with security patches. Hard-disk encryption is a confidentiality measure whose purpose differs from infection prevention.
用語