Skip to content

令和4年度 ITパスポート試験 問74

This question's explanation and your answers so far.

問74
頻出度★★★

サーバ室など, セキュリティで保護された区画への入退室管理において, 一人の認証で他者も一緒に入室する共連れの防止対策として, 利用されるものはどれか。

出典 令和4年度 ITパスポート試験 問74
解説

問 74

  • ア

    正解 The correct answer is ア, Anti-passback. Anti-passback is a mechanism in entry/exit management that enforces the ordering of entries and exits: an ID that has entered cannot enter again unless there is an exit record, and only an ID that has exited may enter. A person who got in by tailgating (piggybacking, where several people enter one after another on a single authentication) has no entry record on their ID, so their exit (and any later entry) is refused at authentication; this exposes the unauthorized entry and so detects and deters tailgating (lending an already-entered card to someone outside for re-entry is refused by the same mechanism).

  • Incorrectイ

    Callback is an authentication method for remote access in which the server dials back to a pre-registered phone number to verify the caller's origin. It is access control over a communication line and has nothing to do with preventing physical tailgating at entry/exit.

  • Incorrectウ

    Single sign-on is a mechanism that lets a user access multiple systems or services with a single authentication. It is an authentication technology that improves user convenience; it does not control entry to physical areas or prevent tailgating.

  • Incorrectエ

    A backdoor is a hidden entry point secretly planted to bypass legitimate authentication and intrude illicitly; it belongs to the attack/threat side. It is not an entry/exit security measure but rather something that should be eliminated.

ここがポイント
  • Anti-passback = an entry/exit management countermeasure that enforces the ordering of entry/exit records and refuses exit by an ID with no entry record, thereby detecting and deterring tailgating (piggybacking) (re-entry by an already-entered ID is also refused).
  • Distinguish these: callback (line authentication), single sign-on (authentication convenience), and backdoor (illicit intrusion point) are none of them physical anti-tailgating measures.
用語

Your answers