問9
頻出度★★★
不適切な行為 a～c のうち, 不正アクセス禁止法において規制されている行為だけを全て挙げたものはどれか。 a 他人の電子メールの利用者 ID とパスワードを, 正当な理由なく本人に無断で第三者に提供する。 b 他人の電子メールの利用者 ID とパスワードを本人に無断で使用して, ネットワーク経由でメールサーバ上のその人の電子メールを閲覧する。 c メールサーバにアクセスできないよう, 電子メールの利用者 ID とパスワードを無効にするマルウェアを作成する。
令和4年度 ITパスポート試験 問9
ストラテジ系法務 › セキュリティ関連法規
This question's explanation and your answers so far.
解説
問 9
- ア
正解 The correct answer is ア (a, b). The Unauthorized Access Prohibition Act regulates the act of unauthorized access that uses another person's ID and password (identification code), together with the surrounding acts that assist that act. b is the act of using another person's ID and password without consent to view that person's email on the mail server over the network, which is a typical act of unauthorized access itself. a is the act of providing another person's ID and password to a third party without a legitimate reason and without consent, and it is regulated by this Act as an act that facilitates unauthorized access (the unauthorized provision of an identification code). Therefore the acts regulated by this Act are the two items a and b, and ア, which lists only these two, is correct.
Incorrectイ
It lists all of a, b, and c, but c is wrong. The act of creating malware in c falls under the Penal Code crime of creating unauthorized command electromagnetic records (the so-called virus-creation crime), and is not an act regulated by the Unauthorized Access Prohibition Act. Including c already makes this choice inappropriate.
Incorrectウ
It lists only b, but a is also regulated by the Unauthorized Access Prohibition Act (the facilitating act of providing an identification code to a third party without consent). Because it drops a, it fails to satisfy the condition of listing all and only the regulated acts.
Incorrectエ
It lists b and c, but is doubly wrong. c falls under the Penal Code (the virus-creation crime), not the Unauthorized Access Prohibition Act, so it must not be included; conversely, a, which is a regulated act, is left out.
ここがポイント
- The Unauthorized Access Prohibition Act regulates the act of unauthorized access (using another person's identification code without consent to use restricted functions) and the facilitating acts such as obtaining, storing, or providing an identification code without consent. b is the act of unauthorized access itself, and a is the unauthorized provision of an identification code (a facilitating act).
- Creating or providing malware (a virus) falls under the Penal Code offenses concerning unauthorized command electromagnetic records (the virus-creation crime); distinguish that its governing law differs from that of the Unauthorized Access Prohibition Act.
用語