問82
頻出度★★★
情報セキュリティの物理的対策として, 取り扱う情報の重要性に応じて, オフィスなどの空間を物理的に区切り, オープンエリア, セキュリティエリア, 受渡しエリアなどに分離することを何と呼ぶか。
令和2年度 ITパスポート試験 問82
This question's explanation and your answers so far.
解説
問 82
Incorrectア
Sanitizing refers to processing that irrecoverably erases and neutralizes data on storage media, or that neutralizes dangerous characters in input values. It is about erasing and neutralizing data, not a physical measure that divides space into sections, so it is wrong.
Incorrectイ
Social engineering is an attack technique that exploits gaps in people’s psychology and behavior to illicitly obtain passwords or confidential information through impersonation, shoulder surfing, phone pretexting, and the like. It has nothing to do with partitioning space for defense, so it is wrong.
- ウ
正解 The correct answer is ウ, “Zoning.” Zoning means physically dividing space into sections (zones) according to the importance of the information or assets handled, and setting a different level of entry and carry-in restriction for each section — a physical security measure. Spaces are separated into an open area (a zone anyone may enter), a security area (a zone only authorized people may enter), and a delivery area (a buffer zone for handing over goods with outside vendors), and the more important the section, the stricter its entry/exit management. This exactly fits the question’s description of physically partitioning and separating space according to importance, so ウ is correct.
Incorrectエ
Hacking refers to technically breaking into and manipulating computers or networks (called cracking in a malicious context) — an attacking, technical act. It is not the name of a physical security measure that divides office space, so it is wrong.
ここがポイント
- Zoning = a physical security measure that divides physical space into sections according to the importance of information assets and varies entry/exit and carry-in restrictions per section (open / security / delivery areas, etc.).
- Distinguishing the confusing choices: sanitizing = neutralizing/erasing data, social engineering = an attack that deceives people, hacking = a technical intrusion act. None of them is a physical partitioning of space.
用語