問82
頻出度★★★
情報セキュリティにおける機密性, 完全性及び可用性のうち, 特に完全性の向上を目的とした取組として, 最も適切なものはどれか。
平成30年度 秋期 ITパスポート試験 問82
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 82
Incorrectア
Configuring the server as a duplex system (redundancy) is a measure that keeps processing running even when equipment fails; its aim is to improve availability — the degree to which the system can be used without stopping — not integrity.
Incorrectイ
Measures to improve the system’s availability rate raise the degree to which the system can be used when needed; their aim is to improve availability, which differs from integrity — the property that information is not tampered with.
Incorrectウ
Requiring user authentication when starting to use the system is a mechanism that lets only authorized, legitimate users access information; its main aim is to improve confidentiality — the property of not showing information to unauthorized people — and it is not a measure that directly improves integrity.
- エ
正解 Integrity means the property of keeping information accurate and complete, in a state where it has not been tampered with or destroyed by unauthorized people. Option エ, “Implement measures to prevent tampering with information,” prevents data from being illicitly rewritten and protects the accuracy and consistency of the information, which is exactly a measure whose direct aim is to improve integrity. Therefore エ is the most appropriate.
ここがポイント
- The three elements of information security (CIA): confidentiality = only authorized people can access it; integrity = information is not tampered with or destroyed and stays accurate and complete; availability = it can be used when needed.
- Measures to improve integrity correspond to “preventing tampering and destruction” (digital signatures, hashes, restricting updates via access control, etc.), whereas authentication corresponds to confidentiality, and duplexing or improving the availability rate correspond to availability — be careful to distinguish these three.
用語