問67
頻出度★★★
情報の漏えいなどのセキュリティ事故が発生したときに, 被害の拡大を防止する活動を行う組織はどれか。
平成29年度 春期 ITパスポート試験 問67
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 67
- ア
正解 The correct answer is “ア” CSIRT (Computer Security Incident Response Team). CSIRT is a specialized “organization (team)” that, when a computer- or network-related security incident (such as an information leak or unauthorized access) occurs, carries out response activities such as investigating the cause, containment, recovery, and preventing recurrence. It is the only choice that matches the question’s “organization that carries out activities to prevent the spread of damage.”
Incorrectイ
ISMS (Information Security Management System) is a “management mechanism and framework” by which an organization maintains and improves information security; it is not the organization that actually handles a specific incident. Because it refers to a framework for routine management, it is incorrect.
Incorrectウ
MVNO (Mobile Virtual Network Operator) refers to a “telecommunications carrier” that does not own its own wireless communication facilities but leases another company’s lines to provide mobile communication services. It has nothing to do with security incident response, so it is incorrect.
Incorrectエ
Digital forensics refers to the “technique and method” of collecting, preserving, and analyzing evidentiary data from storage media and the like in cases of unauthorized access or information leaks. Because it is not an organization, it does not match the question’s “which is an organization,” so it is incorrect.
ここがポイント
- CSIRT is a specialized organization (team) that carries out response activities when a security incident occurs.
- Distinguish that ISMS is a management mechanism and digital forensics is a technique for preserving evidence, and that neither of them is an “organization.”
用語