問67
頻出度★★★
サイバー攻撃の例ではないものはどれか。
平成30年度 春期 ITパスポート試験 問67
テクノロジ系セキュリティ › 情報セキュリティ
This question's explanation and your answers so far.
解説
問 67
- ア
正解 A cyberattack refers to an attack that uses technical means to target networks or computer systems, causing unauthorized access, data tampering, denial of service, and the like. Choice ア describes rummaging through discarded recording media (storage media) in order to obtain confidential information; this is called 'scavenging (trashing)' and is a type of social engineering. Rather than exploiting a technical weakness in a network or system, it obtains information through physical and human channels such as garbage and discarded items, so it does not count as a cyberattack. Because the question asks which is NOT an example of a cyberattack, the correct answer is ア.
Incorrectイ
Exploiting a server's vulnerability to break into a website and tamper with its data is a typical unauthorized-access and data-tampering cyberattack. It is exactly an attack that targets a system by technical means, so it is wrong in this question, which asks you to pick the one that is NOT a cyberattack.
Incorrectウ
Concentrating a massive amount of access requests to bring a service down is a DoS attack (denial-of-service attack) and a representative cyberattack. It is an attack that technically drives a system into malfunction, so it is not the one that is NOT a cyberattack, and is therefore wrong.
Incorrectエ
Using a backdoor to remotely control someone else's PC is a remote-control cyberattack carried out via malware or malicious programs. It is an attack that technically hijacks a computer over a network, so it does not qualify as the one that is NOT a cyberattack, and is therefore wrong.
ここがポイント
- A cyberattack refers to an attack that targets networks or computer systems by technical means (such as unauthorized access, tampering, DoS attacks, and remote control via malware).
- 'Scavenging (trashing)', obtaining confidential information by rummaging through discarded recording media, is a type of social engineering; because it is a physical and human tactic, it is not included in cyberattacks.
用語