問76
頻出度★★★
従業員に貸与するスマートフォンなどのモバイル端末を遠隔から統合的に管理する仕組みであり, セキュリティの設定や, 紛失時にロックしたり初期化したりする機能をもつものはどれか。
令和2年度 ITパスポート試験 問76
This question's explanation and your answers so far.
解説
問 76
Incorrectア
DMZ (DeMilitarized Zone) is a buffer zone placed between an external network and an internal network, where public servers (Web, mail, etc.) are located to protect the internal LAN from the Internet. It is not a mechanism for centrally managing mobile devices, so it is wrong.
- イ
正解 Choice イ, MDM (Mobile Device Management), is a mechanism by which a company remotely and centrally manages mobile devices such as smartphones and tablets lent to employees, from a management server. It can batch-distribute security policies (enforced passwords, app restrictions, etc.) to the devices and perform a remote lock or remote wipe (initialization) when a device is lost or stolen. It matches all of the functions listed in the question — “remote centralized management,” “security settings,” and “lock/initialize when lost” — so the correct answer is イ.
Incorrectウ
SDN (Software-Defined Networking) is a technology that centrally controls network devices with software and flexibly defines and changes the configuration and routing through programs. It is a network-control technology, not a mechanism that configures security settings on mobile devices or locks/initializes them when lost, so it is wrong.
Incorrectエ
VPN (Virtual Private Network) is a technology that builds an encrypted virtual leased line over a public network such as the Internet, enabling secure communication between sites or from a remote device at home. Its purpose is to protect the communication path; it does not have functions for remotely managing or locking/initializing the device itself, so it is wrong.
ここがポイント
- MDM = Mobile Device Management: a mechanism that remotely and centrally manages a company's smartphones/tablets, batch-distributes security settings, and performs a remote lock and remote wipe (initialization) when a device is lost.
- Distinguishing the confusing three-letter acronyms: DMZ = network buffer zone, SDN = software control of a network, VPN = encrypted virtual leased line. None of them is a device-management mechanism.
用語