問97
頻出度★★★
ディジタルフォレンジックスの目的として, 適切なものはどれか。
平成30年度 春期 ITパスポート試験 問97
This question's explanation and your answers so far.
解説
問 97
Incorrectア
The method of deliberately attacking one’s own system to discover vulnerabilities is called a penetration test (intrusion test), a preventive activity that identifies security weaknesses in advance. Its purpose differs from forensics, which collects and preserves evidence after the fact.
- イ
正解 Digital forensics (digital forensic examination) is a technique in which, when a crime or incident such as unauthorized access or information leakage occurs, data on computers or networks (access logs, files, the contents of storage media, etc.) is collected, preserved, and analyzed in a form that can prove it has not been tampered with, so that it can be used to investigate the cause or in legal proceedings. Choice イ, “Collect and preserve data that can serve as legal evidence for crimes such as information leakage,” describes exactly this purpose and is therefore correct.
Incorrectウ
Periodically performing virus checks to confirm safety is an activity of detecting and removing malware with antivirus software. It is routine prevention and verification, not forensics whose purpose is to preserve evidentiary data.
Incorrectエ
Switching from password authentication to biometric authentication to reduce the risk of unauthorized intrusion is a preventive measure that strengthens identity authentication. It aims to prevent intrusion before it happens and is unrelated to forensics, which collects and preserves evidence after the fact.
ここがポイント
- Digital forensics = an after-the-fact technique that collects, preserves, and analyzes data without tampering, in order to investigate the cause of a crime or incident and to obtain legal evidence.
- Penetration testing (finding vulnerabilities), virus checks, and strengthening authentication methods are all preventive measures; distinguish them from forensics, whose purpose is evidence preservation, since their roles differ.
用語