問37
頻出度★☆☆
情報システムで管理している機密情報について, ファシリティマネジメントの観点で行う漏えい対策として, 適切なものはどれか。
平成28年度 秋期 ITパスポート試験 問37
マネジメント系サービスマネジメント › ファシリティマネジメント
This question's explanation and your answers so far.
解説
問 37
Incorrectア
Introducing antivirus software is a software-based (logical) information-security measure that prevents information leakage caused by malware infection; it is not the facility-management perspective of managing buildings and equipment.
- イ
正解 Facility management refers to the activity of optimally maintaining and managing physical facilities such as buildings, equipment, and the indoor environment from a management perspective. If leakage prevention for confidential information is approached from this perspective, the answer must be a measure that protects the physical space where the information system itself is located. Choice イ, entry and exit control for the building that houses the computer room, restricts unauthorized persons from entering the building or room and prevents physical access to and removal of equipment and recording media; it is a physical security measure that exactly matches the facility-management perspective. Therefore イ is correct.
Incorrectウ
Management of IDs and passwords is logical access control (user authentication) for the information system, not a physical measure that protects facilities, so it does not fall under the facility-management perspective.
Incorrectエ
Encryption of electronic documents is a logical, technical means of protecting information by making the data itself unreadable; it is not a leakage-prevention measure from the facility-management perspective, which targets buildings and equipment.
ここがポイント
- Facility management is the concept of maintaining and managing physical facilities such as buildings, equipment, and the indoor environment from a management perspective; in leakage prevention it corresponds to physical security measures such as building and room entry/exit control.
- Information-leakage prevention can be broadly divided into physical measures (entry/exit control, locking, monitoring) and logical measures (antivirus, authentication, encryption); this question requires identifying which perspective is being asked about before choosing.
用語