問1
頻出度★★★
表はコンピュータa～dのネットワーク接続（インターネットなどのオープンネットワークに接続，又はローカルエリアネットワークに接続）の有無及びアクセス制御機能の有無を示したものである。コンピュータa～dのうち，不正アクセス禁止法における不正アクセス行為の対象になり得るものはどれか。
| ネットワーク接続 | アクセス制御機能 | |
|---|---|---|
| コンピュータ a | 有 | 有 |
| コンピュータ b | 有 | 無 |
| コンピュータ c | 無 | 有 |
| コンピュータ d | 無 | 無 |
平成30年度 秋期 ITパスポート試験 問1
ストラテジ系法務 › セキュリティ関連法規
This question's explanation and your answers so far.
解説
問 1
- ア
正解 The unauthorized access act prohibited by the Unauthorized Access Prohibition Act refers to bypassing an access control function—for example by entering another person's identification code (ID, password, etc.) without permission—and thereby making usable, over a network, computer functions that one is not originally entitled to use. For this act to be established, the target computer must satisfy both conditions: being connected to a network (a telecommunications line) and being equipped with an access control function. In the table, the only computer for which both are “Yes” is Computer a, so the one that can be a target of an unauthorized access act is Computer a, and the correct answer is ア.
Incorrectイ
Computer b has a network connection (“Yes”) but no access control function (“No”). Since there is no access control to bypass in the first place, it cannot be a target of an unauthorized access act, which consists of bypassing an access control function.
Incorrectウ
Computer c has an access control function (“Yes”) but no network connection (“No”). An unauthorized access act is required to be carried out over a network (a telecommunications line), so a computer that is not connected to a network is out of scope.
Incorrectエ
Computer d has neither a network connection nor an access control function (both “No”). Since it lacks both requirements, it cannot be a target of an unauthorized access act.
ここがポイント
- Only a computer equipped with both a network connection and an access control function can be a target of an unauthorized access act under the Unauthorized Access Prohibition Act.
- An unauthorized access act is the act of bypassing access control using another person's identification code (ID, password, etc.) and, over a network, making usable functions that one is not originally entitled to use.
用語