問69
頻出度★★★
サイバーキルチェーンの説明として, 適切なものはどれか。
令和4年度 ITパスポート試験 問69
テクノロジ系セキュリティ › 情報セキュリティ
This question's explanation and your answers so far.
解説
問 69
- ア
正解 The cyber kill chain is the idea of breaking a cyberattack down into stages (phases) from the attacker's point of view and modeling it as a sequence: reconnaissance → weaponization → delivery → attack (exploit) → installation → remote control (C&C) → actions on the objective. It is used as a guideline for defensive design: if you can break the attack chain at any one of these stages, you can prevent damage. Choice ア states that it is 'a model that divides the attack stages against an information system into multiple phases such as reconnaissance, attack, and achievement of the objective', which is exactly this definition, so it is correct.
Incorrectイ
Connecting network devices such as hubs and switches one after another in a daisy-chain fashion describes the 'daisy chain'. It merely has the word 'chain' in its name and has nothing to do with the cyber kill chain, which is a model of attack stages.
Incorrectウ
A distributed ledger technology that links blocks bundling transaction records into a chain using the hash value of the previous block describes the 'blockchain'. It is a technology used for crypto-assets and the like, and is a different thing from a staged model of cyberattacks.
Incorrectエ
The phenomenon of a nuisance email containing wording that urges forwarding to others being forwarded one after another across a network to an unspecified large number of people describes 'chain mail'. This, too, merely contains the word 'chain' and differs in meaning from the cyber kill chain, which models an attack process.
ここがポイント
- The cyber kill chain is a defender's thinking framework that models a cyberattack by dividing it into stages such as reconnaissance → weaponization → delivery → attack → installation → remote control → actions on the objective.
- The question tests whether you can distinguish it by definition from confusingly similar terms that contain the word 'chain' (daisy chain, blockchain, chain mail).
用語