問89
頻出度★★★
スマートフォンを利用するときに, ソーシャルエンジニアリングに分類されるショルダーハックの防止策として, 適切なものはどれか。
平成31年度 春期 ITパスポート試験 問89
テクノロジ系セキュリティ › 情報セキュリティ
This question's explanation and your answers so far.
解説
問 89
Incorrectア
Keeping the OS up to date is a measure against unauthorized access or malware infection that exploits known vulnerabilities. It has nothing to do with peeking (someone's line of sight) and cannot prevent shoulder hacking.
Incorrectイ
Turning off the location services feature is a privacy measure to prevent leakage or tracking of location data. It does not prevent the screen itself from being peeked at, so it is not a measure against shoulder hacking.
- ウ
正解 Shoulder hacking (shoulder surfing) is a technique of peeking over someone's shoulder at the screen or password entry to steal information; the threat is not a device vulnerability but the very fact of being seen. When you apply the privacy filter film in ウ to the screen, the screen looks dark and unreadable from any angle other than straight ahead, so peeking by people nearby or in the next seat is physically blocked. Therefore, the direct and effective measure against shoulder hacking is ウ.
Incorrectエ
Attaching a strap is a physical measure to prevent dropping or theft (losing the device itself). It has no effect against the act of peeking at the screen and is not a measure against shoulder hacking.
ここがポイント
- Shoulder hacking (shoulder surfing) is a social engineering technique of peeking over someone's shoulder at the screen or key entry to obtain information; the countermeasure is to make it impossible to be seen. The privacy filter film is a representative preventive measure.
- This question tests the ability to sort the options by what threat each one addresses. OS update = vulnerability measure, turning off location = location-leak measure, strap = drop/theft measure — recognize that these are all different from an anti-peeking measure.
用語