問67
頻出度★★★
ISMS における情報セキュリティに関する次の記述中の a, b に入れる字句の適切な組合せはどれか。 情報セキュリティとは, 情報の機密性, 完全性及び [ a ] を維持することである。さらに, 真正性, 責任追跡性, 否認防止, [ b ] などの特性を維持することを含める場合もある。
令和3年度 ITパスポート試験 問67
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 67
- ア
正解 JIS Q 27000, the standard for an ISMS, defines information security as maintaining the confidentiality, integrity, and availability of information. Therefore blank a is Availability. Availability is the property of keeping information accessible and usable by authorized users whenever needed. In addition, JIS Q 27000 states that it may also include maintaining characteristics such as authenticity, accountability, non-repudiation, and reliability, so blank b is Reliability. Reliability is the property that a system's processing and results are consistently obtained as intended. Therefore the combination a=Availability, b=Reliability, which is choice ア, is correct.
Incorrectイ
The Availability in a is correct, but b as Maintainability is wrong. Maintainability is a quality characteristic that expresses how easy it is to repair faults or make changes; the additional information-security characteristic listed by JIS Q 27000 is reliability, not maintainability.
Incorrectウ
The Reliability in b is correct, but a as Preservation is wrong. The three main elements of information security are confidentiality, integrity, and availability, so what goes in a is availability. Preservation is not an official term among the three elements.
Incorrectエ
Both a as Preservation and b as Maintainability are wrong. Among the three main elements, a should be availability, and among the additional characteristics, b should be reliability; neither blank fits.
ここがポイント
- The three main elements of information security (CIA) are Confidentiality, Integrity, and Availability.
- The additional characteristics in JIS Q 27000 are authenticity, accountability, non-repudiation, and reliability. Maintainability is a quality characteristic, not an information-security characteristic.
用語