問100
頻出度★★★
限られた人にしか閲覧を許可していない紙の名簿を電子化して，名簿ファイルとして管理することにした。次のa～dのうち，個人情報の漏えい対策として，適切なものだけを全て挙げたものはどれか。 a 名簿ファイルに読込みパスワードを設定する。 b 名簿ファイルを暗号化して保存する。 c 名簿ファイルを保存するサーバを二重化構成にする。 d 名簿を電子化した後，紙の名簿をシュレッダーで廃棄する。
平成28年度 秋期 ITパスポート試験 問100
This question's explanation and your answers so far.
解説
問 100
Incorrectア
It lists only “a, b” and omits d (shredding the paper roster), which is an equally effective measure. If the paper remains after digitization, a leakage route through the paper stays open, so d is also an appropriate measure; a and b alone are insufficient.
Incorrectイ
It gives “a, b, c”, but including c (the duplexed server configuration) is wrong. Duplexing is an availability (fault-tolerance) measure that keeps the system usable even during a failure; it is not a confidentiality measure that keeps information from being seen by anyone other than authorized people, i.e. not a leakage measure. In addition, the appropriate item d is missing.
- ウ
正解 The correct answer is the combination of a, b, and d contained in “ア, ウ”, namely choice ウ “a, b, d”. The purpose of measures against personal-information leakage is to keep information from reaching anyone other than authorized people, i.e. to protect confidentiality. Item a, setting a read password, imposes identity confirmation when the file is opened and prevents viewing by anyone other than authorized people, so it is effective. Item b, encrypted storage, makes the contents unreadable even if the file is taken out, so it is effective. Item d, shredding the paper roster, eliminates the very leakage route that the paper remaining after digitization represents, so it is effective. Therefore the appropriate leakage measures are the three items a, b, and d, and choice ウ, which lists only these, is the correct answer.
Incorrectエ
It gives “c, d”, but includes c (duplexing = an availability measure), which is not a leakage measure, while dropping the effective items a (read password) and b (encryption). The combination is inappropriate on two counts.
ここがポイント
- Among the three elements of information security, what leakage measures protect is confidentiality (not giving information to anyone other than authorized people). Passwords, encryption, and disposing of unneeded media all fall under this.
- Server duplexing (redundancy) is a measure to improve availability (usable even during a failure); distinguish it from a leakage (confidentiality) measure.
用語