問61
頻出度★★★
情報セキュリティにおけるディジタルフォレンジックスの説明として, 適切なものはどれか。
平成29年度 春期 ITパスポート試験 問61
This question's explanation and your answers so far.
解説
問 61
Incorrectア
“A method that writes the same data to two external storage devices so that availability is maintained even if one device fails” describes mirroring (RAID1), a technology that improves availability (reliability). It has nothing to do with forensics, which collects and analyzes evidence.
Incorrectイ
“A virtual private network built using public lines that can ensure confidentiality” describes a VPN (Virtual Private Network), a technology that protects the confidentiality of communications. It is not a technology for revealing evidence.
- ウ
正解 Digital forensics refers to the technology and procedures for collecting, preserving, and analyzing electronic data (access logs, files, communication records, disk contents, etc.) without tampering, in order to investigate causes or serve as evidence in litigation when a computer-related crime, incident, or legal dispute such as unauthorized access or information leakage occurs. Choice ウ, “A technology for revealing evidence of crimes or legal disputes related to computers,” exactly matches this definition, so it is correct.
Incorrectエ
“Encrypted information attached to guarantee the legitimacy of a digital document” describes a digital signature (electronic signature), a mechanism that guarantees the author's identity and whether tampering has occurred. It differs from forensics, which analyzes evidence of crimes or disputes.
ここがポイント
- Grasp the definition of digital forensics: a technology that collects, preserves, and analyzes electronic data as evidence without tampering in computer crimes and legal disputes.
- Distinguish the different roles of the easily confused mirroring (availability), VPN (confidentiality), and digital signature (legitimacy, tamper detection) from forensics (evidence analysis).
用語