問87
頻出度★★★
情報セキュリティにおける機密性・完全性・可用性に関する記述のうち, 完全性が保たれなかった例はどれか。
平成28年度 秋期 ITパスポート試験 問87
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 87
Incorrectア
This is an example where an email that was encrypted and sent was eavesdropped on by a third party. Because the content of the information became known to an unauthorized party, this is an example where confidentiality was not maintained, not integrity.
- イ
正解 The correct answer is イ. Among the three elements of information security, integrity means keeping information accurate and complete, so that no inconsistency or loss arises from unauthorized tampering or errors. In イ, an operator entered data by mistake, causing inconsistencies in the customer list. This is a state where the accuracy and consistency of the data has been lost, which is exactly a typical example of integrity not being maintained.
Incorrectウ
This is an example where a shopping site became temporarily unavailable due to a system failure. Because the service could not be used when it was needed, this is an example where availability was not maintained, not integrity.
Incorrectエ
This is an example where customers' personal information managed in the database was leaked. Because the information reached an unauthorized party, this is an example where confidentiality was not maintained, not integrity. The accuracy of the data itself was not compromised.
ここがポイント
- The three elements of information security (CIA): Confidentiality = only authorized persons can access it; Integrity = information is accurate, with no tampering or inconsistency; Availability = it can be used when needed.
- The trick is to map each case to an element: inconsistency arising / tampering / wrong content corresponds to integrity; leakage or eavesdropping corresponds to confidentiality; being unusable or down corresponds to availability.
用語