サーバ室など, セキュリティで保護された区画への入退室管理において, 一人の認証で他者も一緒に入室する共連れの防止対策として, 利用されるものはどれか。
令和4年度 ITパスポート試験 問74
This question's explanation and your answers so far.
問 74
- ア
正解 The correct answer is ア, Anti-passback. Anti-passback is a mechanism in entry/exit management that enforces the ordering of entries and exits: an ID that has entered cannot enter again unless there is an exit record, and only an ID that has exited may enter. A person who got in by tailgating (piggybacking, where several people enter one after another on a single authentication) has no entry record on their ID, so their exit (and any later entry) is refused at authentication; this exposes the unauthorized entry and so detects and deters tailgating (lending an already-entered card to someone outside for re-entry is refused by the same mechanism).
Incorrectイ
Callback is an authentication method for remote access in which the server dials back to a pre-registered phone number to verify the caller's origin. It is access control over a communication line and has nothing to do with preventing physical tailgating at entry/exit.
Incorrectウ
Single sign-on is a mechanism that lets a user access multiple systems or services with a single authentication. It is an authentication technology that improves user convenience; it does not control entry to physical areas or prevent tailgating.
Incorrectエ
A backdoor is a hidden entry point secretly planted to bypass legitimate authentication and intrude illicitly; it belongs to the attack/threat side. It is not an entry/exit security measure but rather something that should be eliminated.
- Anti-passback = an entry/exit management countermeasure that enforces the ordering of entry/exit records and refuses exit by an ID with no entry record, thereby detecting and deterring tailgating (piggybacking) (re-entry by an already-entered ID is also refused).
- Distinguish these: callback (line authentication), single sign-on (authentication convenience), and backdoor (illicit intrusion point) are none of them physical anti-tailgating measures.