問87
頻出度★★★
情報セキュリティ対策を, 技術的対策, 人的対策及び物理的対策の三つに分類したとき, 物理的対策の例として適切なものはどれか。
平成31年度 春期 ITパスポート試験 問87
This question's explanation and your answers so far.
解説
問 87
Incorrectア
Introducing biometric authentication for PC login authentication is a means of performing identity verification through a system function, and is classified as a technical measure. It is not physical entry control.
Incorrectイ
Installing a firewall is a means of blocking unauthorized intrusion from an external network through the functions of software or devices, and falls under technical measures. It is not a physical means such as zoning or locking.
Incorrectウ
Assigning multiple security administrators and having them mutually check each other's work is a means of deterring and detecting misconduct or errors through a human operational structure, and is a human measure. It is not a physical intrusion-prevention measure.
- エ
正解 The correct answer is エ. A physical measure refers to a means of preventing physical intrusion into or contact with the 'place itself' where servers or information are located. In エ, a security zone is set up and locked, the lending of keys is managed, and whether there is any unauthorized entry is checked — all of these control people's entry through physical mechanisms such as doors, keys, and zones, which makes it a prime example of a physical measure.
ここがポイント
- The three categories of information security measures — technical measures (system functions such as authentication and firewalls), human measures (human operation such as education, mutual checking, and organizational structure), and physical measures (physical protection of places and equipment such as locking, entry/exit management, and zoning).
- 'Physical' refers to controlling intrusion into or contact with physical places such as facilities, zones, doors, and keys; lock management and entry/exit management are typical examples.
用語