認証に必要な情報の変更又は更新を定期的に行う必要がないものだけを全て挙げたものはどれか。 a 虹彩認証 b 電子証明書による認証 c パスワード認証
平成28年度 春期 ITパスポート試験 問90
This question's explanation and your answers so far.
問 90
- ア
正解 The question asks for the option that lists only the items that do not require the periodic change or update of the information needed for authentication. Iris authentication in a uses the iris of the eye, a physical characteristic that barely changes throughout a person’s life, so it is a form of biometric authentication; as long as the person stays the same, the registered information does not need to be updated periodically. In contrast, the digital certificate in b has an expiry date and must be renewed (reissued) before it expires, and the password in c is recommended to be changed periodically to guard against the risk of leakage or guessing. Therefore only a does not require periodic updating, and option ア, which lists only “a”, is the correct answer.
Incorrectイ
This lists only the digital certificate in b, but a digital certificate has an expiry date and must be renewed (reissued) before it expires. It therefore violates the condition of not requiring periodic updates and is incorrect.
Incorrectウ
This lists only the password in c, but a password is information that must be changed periodically to prevent leakage or guessing, so it does not meet the condition of needing no update. It is therefore incorrect.
Incorrectエ
This lists a and b, but the digital certificate in b has an expiry date and requires periodic renewal (reissuance), so it does not satisfy the condition. Only a does not need updating, and this combination that includes b is incorrect.
- Biometric authentication (iris authentication) uses a person’s inherent physical characteristics, so the registered information does not need to be changed or updated periodically.
- Distinguish that a digital certificate has an expiry date and must be renewed before it expires, whereas a password is recommended to be changed periodically as a countermeasure against leakage.