問85
頻出度★★★
無線LANのセキュリティにおいて, アクセスポイントがPCなどの端末からの接続要求を受け取ったときに, 接続を要求してきた端末固有の情報を基に接続制限を行う仕組みはどれか。
令和3年度 ITパスポート試験 問85
テクノロジ系ネットワーク › ネットワーク方式
This question's explanation and your answers so far.
解説
問 85
Incorrectア
ESSID is the name (identifier) that identifies a wireless LAN network, used to specify which access point to connect to. It is not unique information of a terminal, and it is not a mechanism that restricts connections on a per-terminal basis.
- イ
正解 The correct answer is イ, “MAC address filtering.” Every network device is assigned a unique MAC address at manufacture, and this corresponds to the “unique information of a terminal.” The access point is pre-registered with the MAC addresses that are allowed to connect; a terminal is permitted only when the MAC address of its connection request matches a registered one, and is otherwise rejected. This restricts connections on a per-terminal basis, matching the mechanism described in the question.
Incorrectウ
A VPN is a technology that encrypts the communication path to build a virtual dedicated line and secure a safe communication channel. It protects the content of communications; it is not a mechanism that judges whether a terminal may connect to an access point based on the terminal’s unique information.
Incorrectエ
WPA2 is an encryption and authentication standard for wireless LAN that encrypts communications and authenticates using a password (pre-shared key). Its purpose differs from that of a mechanism that restricts connections based on a terminal’s unique MAC address.
ここがポイント
- MAC address filtering = a connection-restriction mechanism that registers a terminal’s unique MAC address at the access point and allows only registered terminals to connect.
- Distinguishing the roles of wireless LAN security terms: ESSID (network identification), VPN (encryption of the communication path), WPA2 (encryption and authentication standard).
用語