問83
頻出度★★★
情報セキュリティにおいて, 可用性が損なわれる事象はどれか。
平成28年度 春期 ITパスポート試験 問83
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 83
Incorrectア
The theft of a USB memory stick containing confidential information is an event that risks information reaching unauthorized persons; what is compromised is confidentiality, not availability.
Incorrectイ
The customer information being operated with incorrect content means the information is not kept accurate and up to date; what is compromised is integrity, not availability.
Incorrectウ
The leakage of confidential information due to unauthorized intrusion into the server is an event where information becomes known to persons without authorization; what is compromised is confidentiality, not availability.
- エ
正解 The correct answer is エ. Among the three elements of information security, “availability” refers to the state in which authorized users can use the system or information whenever they need it. Choice エ describes an event where the electronic settlement system with a business partner was hit by a DoS attack (an attack that sends a large volume of access requests to disrupt a service) and could no longer process transactions — a typical case of not being able to use it when you want to, i.e. availability is compromised. Therefore エ is correct.
ここがポイント
- The three elements of information security (CIA): confidentiality = only authorized persons can view it; integrity = information is accurate and not tampered with; availability = it can be used when needed.
- A DoS attack stops or disrupts a service to make it unusable; remember it as a representative example of compromising availability.
用語