問79
頻出度★★★
情報セキュリティにおける完全性を維持する対策の例として, 最も適切なものはどれか。
平成29年度 春期 ITパスポート試験 問79
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 79
- ア
正解 Integrity in information security means that information is kept accurate and consistent without being tampered with or destroyed. A digital signature is a mechanism that encrypts the hash value of the data with the signer's private key and attaches it; by verifying the signature, the receiver can confirm both whether the data was tampered with in transit and whether the creator is genuine. Therefore, attaching a digital signature is a representative measure that maintains integrity through tamper detection, so ア is the most appropriate.
Incorrectイ
Encrypting data is a measure to prevent third parties from reading its contents, so what it protects is confidentiality. Encryption does not by itself detect tampering, so it is not appropriate as a measure for integrity.
Incorrectウ
Hardware duplication (redundancy) is a measure that lets the system keep running without stopping even if equipment fails, so what it protects is availability. It concerns a different aspect from whether data stays correct, so it is not an example of integrity.
Incorrectエ
Introducing a load balancer distributes access across multiple servers so that processing does not become concentrated, keeping the system running stably; this also improves availability. It has nothing to do with tamper detection, so it does not count as a measure for integrity.
ここがポイント
- The three core elements of information security are confidentiality (keeping secrets), integrity (preventing and detecting tampering), and availability (staying usable). Digital signatures and hash values are used for tamper detection to maintain integrity.
- Mapping of measures to the elements they protect: encryption → confidentiality, digital signature → integrity (plus authenticity), duplication and load balancing → availability.
用語