問58
頻出度★★★
サーバルームへの共連れによる不正入室を防ぐ物理的セキュリティ対策の例として, 適切なものはどれか。
令和3年度 ITパスポート試験 問58
This question's explanation and your answers so far.
解説
問 58
- ア
正解 Tailgating is an unauthorized-entry technique in which an unauthenticated person slips in right behind a legitimate entrant while the door is open. The key to preventing it physically is to let only one person pass per authentication. A circle-type security gate is a cylindrical booth whose entrance-side and exit-side doors never open at the same time, and it opens the exit side only after confirming, with a weight sensor or the like, that just one person is inside; therefore someone trying to follow behind cannot physically get through. Thus ア is the appropriate example of a tailgating countermeasure.
Incorrectイ
Locking the rack protects physical access to the server equipment itself; it does not control people entering the server room. It cannot prevent unauthorized entry by tailgating.
Incorrectウ
Wearing an entry pass is merely a rule that helps identify and distinguish people inside the room; it is not a mechanism that stops passage at the door. It cannot block an unauthenticated person who tailgated in at the entrance.
Incorrectエ
Recording in the entry/exit log is an operational measure that relies on self-declaration; it cannot physically prevent tailgating where someone follows in without writing a record. It helps with after-the-fact tracing but does not block entry.
ここがポイント
- Tailgating = unauthorized entry in which an unauthenticated person follows right behind an authenticated one. Preventing it requires a physical mechanism that lets only one person pass per authentication.
- A circle-type security gate physically enforces one-at-a-time passage to prevent tailgating. Anti-passback is a record-based entry/exit control, not a physical barrier, that checks the consistency of entry and exit records (an ID with no entry record cannot exit) to detect and deter tailgating; distinguish the two.
用語