問94
頻出度★★★
特定のPCから重要情報を不正に入手するといった標的型攻撃に利用され，攻撃対象のPCに対して遠隔から操作を行って，ファイルの送受信やコマンドなどを実行させるものはどれか。
令和3年度 ITパスポート試験 問94
テクノロジ系セキュリティ › 情報セキュリティ
This question's explanation and your answers so far.
解説
問 94
- ア
正解 RAT (Remote Access Trojan) is malware that an attacker uses to break into and stay resident on a victim PC, then freely control that PC remotely over the Internet. It can send and receive files, run arbitrary commands, log keystrokes, capture the screen, and more; in a targeted attack it is planted on a specific organization's PC to steal important information over a long period. The remote control and the sending/receiving of files and running of commands named in the question are typical features of a RAT, so ア is the correct answer.
Incorrectイ
A VPN (Virtual Private Network) is a legitimate technology that builds an encrypted virtual dedicated channel over public lines to communicate securely. It is not attack malware and has no ability to hijack and control a PC remotely, so it is wrong.
Incorrectウ
A device driver is legitimate software the OS uses to control peripherals such as printers and disks; its purpose is not to steal information or perform remote control. It is not a tool for targeted attacks, so it is wrong.
Incorrectエ
Ransomware is malware that arbitrarily encrypts the files on a PC to make them unusable and demands a ransom in exchange for recovery. Its purpose is to extort money, and its main function is not the remote control, file send/receive, and command execution asked about in the question, so it is wrong.
ここがポイント
- RAT (Remote Access Trojan) = a remote-control Trojan that lets an attacker operate a victim PC remotely, sending/receiving files and running commands. It is used to steal information in targeted attacks.
- Telling the confusing terms apart: a VPN is a legitimate technology that builds a secure channel, a device driver is legitimate software that controls peripherals, and ransomware is malware that encrypts files and demands a ransom.
用語