問59
頻出度★★★
会社で業務に使用している PC において，OS，ミドルウェアやアプリケーションなどに適用するセキュリティパッチに関する記述として，適切なものはどれか。
平成28年度 秋期 ITパスポート試験 問59
This question's explanation and your answers so far.
解説
問 59
- ア
正解 A security patch is provided to fix vulnerabilities (security flaws) found in the OS, middleware, or applications. Attackers and viruses try to intrude and infect by exploiting these vulnerabilities, so applying patches promptly to close the flaws helps prevent virus infection. Therefore, choice A, which states that they should be applied as a measure to prevent virus infection, is appropriate.
Incorrectイ
A security patch is a preventive measure to stop infection before it happens; applying it only after an infection has occurred is too late. Applying it before infection is the correct practice, so this choice is wrong.
Incorrectウ
A security patch is not for adding features but for fixing vulnerabilities. Even if you are satisfied with the current functionality, leaving vulnerabilities unaddressed still leaves the risk of attack and infection, so applying it is necessary; therefore this choice is wrong.
Incorrectエ
For software whose support has ended, no fix patches are provided even if new vulnerabilities are discovered afterward. Even if all past patches have been applied, there is still a risk of being attacked through unknown vulnerabilities, so it cannot be said to be safe to use; therefore this choice is wrong.
ここがポイント
- A security patch is a fix program provided to repair vulnerabilities in the OS and software; in principle it should be applied promptly to prevent virus infection and attacks before they occur.
- Software whose support has ended (provision discontinued) will no longer receive patches, so it cannot address new vulnerabilities, and continuing to use it is dangerous.
用語