問57
頻出度★★★
情報セキュリティにおけるPKIに必要不可欠な構成要素はどれか。
平成28年度 春期 ITパスポート試験 問57
This question's explanation and your answers so far.
解説
問 57
Incorrectア
VPN is a communication technology that connects sites or devices to each other through encrypted tunnels. Some configurations authenticate using PKI electronic certificates, but VPN is not a component of PKI itself, and a VPN can be established even without PKI, so it cannot be called indispensable.
- イ
正解 PKI (Public Key Infrastructure) is a framework for securely operating public-key cryptography; it uses electronic certificates (digital certificates) to guarantee that a communication partner’s public key is genuine. The trusted third-party organization that issues these certificates and manages their validity periods and revocation is the Certificate Authority (CA). Without a Certificate Authority the validity of certificates cannot be guaranteed and PKI cannot be established, so the indispensable component is the “Certificate Authority” (イ).
Incorrectウ
Biometric authentication is an authentication method that verifies a person’s identity using biometric information such as fingerprints, irises, or faces. It is a mechanism of a different kind from PKI, which is based on public keys and certificates, and is not a component of PKI.
Incorrectエ
A firewall is a mechanism that performs access control by permitting or blocking communication at the network boundary. Its role differs from issuing and managing certificates, and it is not a component of PKI.
ここがポイント
- The core of PKI (Public Key Infrastructure) is the Certificate Authority (CA), which issues and manages electronic certificates. PKI is established because the CA guarantees the validity of public keys.
- Distinguish clearly that VPN, biometric authentication, and firewall are all security technologies for other purposes and are not required components of PKI.
用語