問72
頻出度★★★
アプリケーションプログラムやデバイスドライバなどを安全に配布したり, それらが不正に改ざんされていないことを確認したりするために利用するものはどれか。
平成29年度 秋期 ITパスポート試験 問72
This question's explanation and your answers so far.
解説
問 72
Incorrectア
SMTP is a protocol for sending and forwarding email. Although it could serve as a channel for distributing software, it has no function for verifying the legitimacy of the publisher or detecting tampering.
Incorrectイ
WPA2 is a security standard that encrypts and protects wireless LAN communication, aimed at preventing eavesdropping over the radio segment. It is unrelated to detecting tampering of the distributed software itself.
- ウ
正解 The correct answer is “ウ Code signing.” Code signing is a mechanism in which the publisher of software attaches a digital signature to a program (such as an executable file or a device driver). Using the accompanying certificate, the user can confirm who created it (the legitimacy of the publisher), and by verifying the signature, can detect whether the program was tampered with during distribution (integrity). This satisfies both of what the question asks: safe distribution and confirmation against unauthorized tampering.
Incorrectエ
A digital watermark is a technology that embeds hard-to-perceive information into content such as images or audio, used for copyright protection or proof of origin. It is not intended to verify a program's publisher or detect tampering.
ここがポイント
- Code signing = a mechanism that attaches a digital signature to software so that users can verify the legitimacy of the publisher (authenticity) and that the program has not been tampered with (integrity).
- Distinguishing confusable terms: a digital watermark is for copyright protection and proof of origin, WPA2 is for encrypting wireless communication, and SMTP is for email forwarding — none are used to detect tampering of software.
用語