問31
頻出度★★★
ネットワークに接続されアクセスが制限されているコンピュータに対して, システムのセキュリティ上の弱点を突いて侵入する行為を規制している法律はどれか。
平成28年度 秋期 ITパスポート試験 問31
ストラテジ系法務 › セキュリティ関連法規
This question's explanation and your answers so far.
解説
問 31
Incorrectア
The Interception of Communications Act (Act on the Interception of Communications for Criminal Investigation) sets out the procedures by which investigative agencies intercept communications, based on a judge's warrant, when investigating serious crimes. It does not regulate unauthorized intrusion into computers, so this option is wrong.
- イ
正解 The correct answer is イ, the “Unauthorized Access Prohibition Act.” This law (formal name: Act on the Prohibition of Unauthorized Computer Access) prohibits and punishes, as an “unauthorized access act,” entering another person's identification code (ID or password) without permission, or exploiting a security hole (weakness) in a system to bypass access restrictions and intrude over a network into a computer one has no authorization to use. The act described in the question—intruding into a restricted-access computer by exploiting its weaknesses—is exactly this prohibited conduct, so イ is the law that regulates it.
Incorrectウ
The Provider Liability Limitation Act defines the scope of a provider's liability for damages when a rights infringement (such as defamation) occurs on the internet, and the procedure for requesting disclosure of sender information. It is not a law that regulates the act of unauthorized intrusion itself, so this option is wrong.
Incorrectエ
The My Number Act (Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures) establishes the system for assigning, using, and protecting individual numbers (My Number). It does not regulate the act of intruding into computers, so this option is wrong.
ここがポイント
- Remember that the Unauthorized Access Prohibition Act is a law that prohibits and punishes “unauthorized access acts”—conduct that bypasses access restrictions, such as entering another person's ID or password without permission or intruding by exploiting a security hole.
- The various information-security-related laws (Interception of Communications Act, Provider Liability Limitation Act, My Number Act, etc.) each regulate different subjects; memorize the mapping “regulating intrusion = Unauthorized Access Prohibition Act.”
用語