問21
頻出度★★★
不正アクセス禁止法に関して，次の記述中の a，b に入れる字句の適切な組合せはどれか。 不正アクセス禁止法で規制されている不正アクセス行為とは，ネットワークを通じて無断で [ a ] を使い，コンピュータにアクセスする行為などのことである。他にも，無断で [ b ] という行為も規制されている。
平成30年度 春期 ITパスポート試験 問21
ストラテジ系法務 › セキュリティ関連法規
This question's explanation and your answers so far.
解説
問 21
- ア
正解 Blank a should be filled with “someone else's authentication credentials” and b with “telling a third party someone else's authentication credentials”, so the combination is ア. For a, the typical “unauthorized access act” regulated by the Unauthorized Access Prohibition Act is using someone else's authentication credentials such as an ID or password (an identification code) over a network without permission and logging into a computer while impersonating that person (the identification-code-theft type). For b, the Act prohibits not only the unauthorized access act itself but also the “facilitating act” that makes it easier, namely providing someone else's authentication credentials to a third party without a legitimate reason (the act of telling them). Therefore ア, with a = someone else's authentication credentials / b = telling a third party someone else's authentication credentials, is correct.
Incorrectイ
The “someone else's authentication credentials” in a is correct, but “operating someone else's PC directly from the keyboard” in b is wrong. The Unauthorized Access Prohibition Act regulates access carried out “over a network”, so physically operating a PC directly from the keyboard on the spot falls outside the scope of this Act.
Incorrectウ
The “malicious program” in a is wrong. The typical unauthorized access act is the unauthorized use of someone else's authentication credentials, not the program itself. The “operating directly from the keyboard” in b is also not carried out over a network, so it too is outside the scope, and both a and b are inappropriate.
Incorrectエ
Neither “malicious program” in a nor “creating a malicious program” in b is regulated by the Unauthorized Access Prohibition Act. Creating and providing a virus (a malicious program) belongs to a different domain handled by the Penal Code's offense concerning unauthorized commands and electromagnetic records (the so-called virus-creation offense); this option confuses the two.
ここがポイント
- The “unauthorized access act” under the Unauthorized Access Prohibition Act means accessing a system over a network by using someone else's authentication credentials (ID and password) without permission while impersonating that person. The physical act of operating directly from the keyboard on the spot lacks the “over a network” requirement and is therefore outside its scope.
- The Act also prohibits acts that facilitate unauthorized access (providing or telling someone else's authentication credentials to a third party without a legitimate reason). Meanwhile, creating a virus (a malicious program) is handled by the Penal Code's virus-creation offense, which falls within the scope of a different law.
用語