問67
頻出度★★★
重要な情報を保管している部屋がある。この部屋への不正な入室及び室内での重要な情報への不正アクセスに関する対策として, 最も適切なものはどれか。
令和元年度 秋期 ITパスポート試験 問67
This question's explanation and your answers so far.
解説
問 67
- ア
正解 To secure a room that stores important information, both preventing unauthorized entry and preventing unauthorized access inside the room are needed. Option ア uses security guards and surveillance cameras to verify entry and exit (a countermeasure against unauthorized entry) and further monitors the work done inside the room (a countermeasure against unauthorized access inside). By combining human monitoring with machine monitoring, it provides deterrence, detection, and recording, so it can address both threats required by the question at the same time, making it the most appropriate countermeasure.
Incorrectイ
The principle is that an entry permit should be worn in a visible place so that others can verify whether the wearer is a legitimate entrant. Worn where others cannot see it, identity verification and the identification of suspicious persons become impossible, which instead encourages unauthorized entry.
Incorrectウ
If the staffed reception desk is abolished and only electronic methods such as card authentication are used, no person can detect the lending or theft of cards or tailgating (entering by following someone in), and the human eyes of monitoring are lost. Removing the staffed reception desk is not a strengthening of the countermeasure but a weakening of it, so it is inappropriate.
Incorrectエ
If the existence of the room and the information stored there are made known to all employees, the location of the important information becomes known even to those who do not need it, widening the range of attack targets. In security, the principle is to inform only those who need to know (need to know), so broadly publicizing it is counterproductive.
ここがポイント
- Physical security measures combine both entry/exit management (preventing unauthorized entry) and monitoring inside the room (preventing unauthorized access). Security guards (human monitoring) plus surveillance cameras (machine monitoring) are effective for deterrence, detection, and recording.
- The principle of need to know (inform only those who need to know). Do not unnecessarily publicize where information is located, and have permits worn in a visible form for identity verification.
用語