問88
頻出度★★★
ウイルスの感染に関する記述のうち, 適切なものはどれか。
平成31年度 春期 ITパスポート試験 問88
テクノロジ系セキュリティ › 情報セキュリティ
This question's explanation and your answers so far.
解説
問 88
- ア
正解 The target of a virus (malware) infection is not limited to the programs of the OS and applications. In recent years, malware that rewrites the “firmware” embedded in devices (routers, IoT devices, peripherals, etc.) has also been confirmed; once the firmware is infected, malicious code can remain even after reinstalling the OS, making it hard to detect and remove. Therefore, choice “ア”, which states that “firmware can also be infected,” is appropriate.
Incorrectイ
Even without a network connection, a virus can infect and spread via external storage media such as USB flash drives. Infection through media (such as the autorun type) is a typical route, so “you will not be infected if you use only external storage media” is wrong.
Incorrectウ
In principle, a PC found to be infected should be immediately disconnected from the network. If it stays connected, the infection may spread to other devices within the company, or it may communicate with the outside and leak information. Continuing to work while still connected to the network is not appropriate.
Incorrectエ
The infection route is not limited to email attachments. There are various routes, such as viewing a tampered website (drive-by download), external storage media, and network routes that exploit vulnerabilities. So it cannot be said that “you will not be infected as long as you do not open an attachment.”
ここがポイント
- The targets of malware infection are not only the OS and applications but can also extend to a device’s firmware.
- Infection routes are diverse (external media, web browsing, network); when an infection is found, the basic response is to first disconnect from the network.
用語