a~c のうち, PC がウイルスに感染しないようにするための対策として, 適切なものだけを全て挙げたものはどれか。 a ソフトウェアに対するセキュリティパッチの適用 b ハードディスクのストライピング c 利用者に対するセキュリティ教育
平成30年度 春期 ITパスポート試験 問92
This question's explanation and your answers so far.
問 92
Incorrectア
This lists only a, but the appropriate measures are not just a; measure c, security education for users, is equally effective. Because c is missing, it fails to satisfy the condition of listing all appropriate items, so it is wrong.
Incorrectイ
This includes measure b, striping of the hard disk (RAID 0). Striping is a technique that spreads data across multiple disks to speed up reading and writing; it has nothing to do with preventing virus infection and is not an appropriate measure. This combination that includes b is wrong.
- ウ
正解 ウ is correct. Measures to prevent virus infection should be considered from two sides: technical measures that block the intrusion route, and measures that correct people's behavior. Measure a, applying security patches, is an effective technical measure that fixes software vulnerabilities and closes the holes that viruses exploit. Measure c, security education for users, is an equally effective measure that makes users consistently avoid opening suspicious email attachments or links and installing suspicious software. Therefore the appropriate measures are the two items a and c, and “ウ (a, c)”, which lists exactly these with nothing missing or extra, is the correct answer.
Incorrectエ
This is the combination of b and c. Measure c is appropriate, but b, striping, is not a measure against viruses. In addition, the appropriate measure a is missing. Because it includes the inappropriate b and lacks the appropriate a, it is wrong.
- Measures to prevent virus infection consist of two aspects: technical measures that fix vulnerabilities (applying security patches), and measures that correct users' behavior (security education).
- Distinguish clearly: striping (RAID 0) is a technique that spreads data across multiple disks to speed up reading and writing; it belongs to the topic of availability and performance, not security measures.