不適切な行為 a~c のうち, 不正アクセス禁止法において規制されている行為だけを全て挙げたものはどれか。 a 他人の電子メールの利用者 ID とパスワードを, 正当な理由なく本人に無断で第三者に提供する。 b 他人の電子メールの利用者 ID とパスワードを, 本人に無断で使用してネットワーク経由でメールサーバ上のその人の電子メールを閲覧する。 c メールサーバにアクセスできないよう, 電子メールの利用者 ID とパスワードを無効にするウイルスを作成する。
平成29年度 春期 ITパスポート試験 問15
This question's explanation and your answers so far.
問 15
Incorrectア
Listing only a is insufficient. Act b — accessing a system using another person's ID and password without permission — is also regulated as an unauthorized access act, so listing only a is wrong.
- イ
正解 The correct answer is “イ” (a, b). The Unauthorized Access Prohibition Act regulates the act of unauthorized access — using another person's ID and password without permission to access a system via the network (act b) — together with the facilitating act that assists it, namely providing another person's ID and password to a third party without a legitimate reason and without the person's consent (act a). Therefore acts a and b are the two subject to regulation, and “イ”, which lists only these, is correct. Note that creating a virus that invalidates IDs and passwords, as in act c, is punished under the Virus Creation Crime of the Penal Code (the crime concerning unauthorized commands on electromagnetic records) and is not subject to the Unauthorized Access Prohibition Act.
Incorrectウ
Including c is wrong. Creating a virus (act c) is handled under the Virus Creation Crime of the Penal Code (the crime concerning unauthorized commands on electromagnetic records) and is not subject to the Unauthorized Access Prohibition Act.
Incorrectエ
Listing only b is insufficient. Act a — providing an ID and password to a third party without a legitimate reason — is also regulated as an act that facilitates unauthorized access, so listing only b is wrong.
- The scope of the Unauthorized Access Prohibition Act covers (1) unauthorized access acts that misuse another person's identification code (ID and password), and (2) facilitating acts such as improperly providing an identification code.
- Creating and providing a virus is regulated not by the Unauthorized Access Prohibition Act but by the Virus Creation Crime of the Penal Code (the crime concerning unauthorized commands on electromagnetic records).