問78
頻出度★★★
部外秘とすべき電子ファイルがある。このファイルの機密性を確保するために使用するセキュリティ対策技術として, 適切なものはどれか。
令和元年度 秋期 ITパスポート試験 問78
This question's explanation and your answers so far.
解説
問 78
- ア
正解 The three elements of information security are confidentiality, integrity, and availability, and this question asks about the technology that protects the confidentiality of an internal-use-only file. Confidentiality means that only authorized users can access the information, and that those without permission are not allowed to view or use it. Access control is a mechanism that, based on user authentication and permissions, restricts who can read and write which files; it therefore prevents unauthorized people from viewing or taking out the file and directly ensures confidentiality. Hence the correct answer is ア (Access control).
Incorrectイ
A timestamp is a technology that proves a certain piece of electronic data existed at a given time and has not been altered since; its purpose is to guarantee the authenticity of the time and the integrity of the data. It does not control who can view the data, so it does not contribute to ensuring confidentiality.
Incorrectウ
A digital signature is a technology whose purpose is to prevent sender impersonation (authenticity), detect data tampering (integrity), and prevent repudiation. It does not conceal the content itself, so it is not a means of protecting confidentiality.
Incorrectエ
Hot standby is a redundancy configuration in which the standby system is kept running at all times and is switched over immediately upon a failure to continue processing; what it ensures is availability. This is a different element from confidentiality and does not match the purpose of this question.
ここがポイント
- The mapping between the three elements of information security (confidentiality, integrity, and availability) and the representative countermeasure technology corresponding to each element.
- Confidentiality = only authorized people can access. The core technology that protects this is access control (authentication + authorization).
用語