問89
頻出度★★★
セキュリティを保つべきサーバルームの運用例として, 適切なものはどれか。
平成28年度 春期 ITパスポート試験 問89
This question's explanation and your answers so far.
解説
問 89
Incorrectア
If ID cards are issued per department rather than per individual, it becomes impossible to identify and trace, on an individual basis, who entered or left and when, so the traceability of the entry/exit records is lost. This trades away accountability for ease of management, and is inappropriate.
Incorrectイ
If the server room’s location is made known to all employees and visitors via a room name displayed at the entrance, the location of the important area that should be protected is also revealed to outsiders, thereby pointing out a target for attack or intrusion. The location only needs to be known by those who need it, so displaying it is inappropriate.
Incorrectウ
Entry/exit records are indispensable evidence for deterring unauthorized access and for later tracing and auditing. If records are not kept on the grounds of “preventing leakage”, it becomes impossible to verify when and who entered or left, which instead makes security management impossible. Records should be kept and then properly protected.
- エ
正解 A server room concentrates important equipment and information, so working alone inside it easily becomes a breeding ground for improper operations or accidents. Option エ, “do not allow work in the server room when no supervisor is present”, reflects the idea of mutual checking — keeping at least two people and a supervisor’s watch present at all times to deter improper acts and operational mistakes — and is appropriate as a physical-security operation.
ここがポイント
- Physical security operation of a server room: entry/exit management should identify and record on an individual basis (ensuring traceability), and solo work should be avoided so that mutual checking is in effect — these are the basics.
- For important areas, do not needlessly publicize their location; and for records, the correct direction is not “not keeping them” but “keeping them and protecting them”.
用語