パスワードに関連した不適切な行為 a~d のうち,不正アクセス禁止法で規制されている行為だけを全て挙げたものはどれか。 a 業務を代行してもらうために,社内データベースアクセス用の自分の ID とパスワードを同僚に伝えた。 b 自分の PC に,社内データベースアクセス用の自分のパスワードのメモを貼り付けた。 c 電子メールに添付されていた文書を PC に取り込んだ。その文書の閲覧用パスワードを,その文書を見る権利のない人に教えた。 d 人気のショッピングサイトに登録されている他人の ID とパスワードを,無断で第三者に伝えた。
令和5年度 ITパスポート試験 問15
This question's explanation and your answers so far.
問 15
Incorrectア
This lists all of a, b, c, and d, but a (telling one's own ID/password), b (sticking up a note of one's own password), and c (telling someone the document-viewing password) are none of them subject to the Unauthorized Access Prohibition Act. Even if they violate internal company rules or pose information-management problems, they do not amount to the “provision of another person's identification code (facilitating act)” defined by the Act, so this is wrong.
Incorrectイ
This lists a, c, and d, but a and c are not subject to regulation, so it is wrong. a is the act of telling one's own authentication information, not the “provision of another person's identification code”; and c's document-viewing password is not an identification code related to the access-control function of a computer on a network, so it is not included in the Act's scope.
Incorrectウ
This lists a and d, but a is not subject to regulation, so it is wrong. a is the act of telling a colleague one's “own” ID and password, which does not fall under the “facilitating act of providing another person's identification code to a third party without permission” regulated by the Unauthorized Access Prohibition Act. Only d is regulated.
- エ
正解 The Unauthorized Access Prohibition Act regulates the act of providing another person's identification code (ID/password) to a third party without the consent of the access administrator or the authorized user (an act that facilitates unauthorized access, Article 5). In d, a person tells a third party, without permission, the ID and password of “another person” registered on a popular shopping site, which is exactly this facilitating act, so it is subject to regulation. Among a to c, only d is regulated, so the correct answer is エ, which lists “d”.
- The key point is that the “offense of providing an identification code (act facilitating unauthorized access, Article 5)” under the Unauthorized Access Prohibition Act regulates the act of providing another person's ID/password to a third party without a legitimate reason.
- The scope of regulation is limited to the unauthorized provision of “another person's” identification code; telling one's own authentication information, or disclosing a document-viewing password unrelated to a network-based access-control function, falls outside the Act.