問61
頻出度★★★
IoT システムなどの設計, 構築及び運用に際しての基本原則とされ, システムの企画, 設計段階から情報セキュリティを確保するための方策を何と呼ぶか。
令和5年度 ITパスポート試験 問61
This question's explanation and your answers so far.
解説
問 61
Incorrectア
Secure boot is a mechanism that, at startup, verifies the signatures of the OS and firmware to confirm they have not been tampered with, and allows only legitimate software to start. It is a specific boot-protection technology, not a term that refers to the design philosophy of building in safety from the planning and design stages.
- イ
正解 The correct answer is “イ Security by Design”. Security by Design is the idea of building in and ensuring information security from the very first stage of a system, namely planning and design, and it is regarded as a basic principle in the design, construction, and operation of IoT systems. The key point is that, rather than being a measure added on afterward, safety is built in from the upstream processes in advance, which exactly matches the question's description of a measure to ensure information security from the planning and design stages.
Incorrectウ
Universal design is the idea of designing products and services so that as many people as possible can use them easily, regardless of age, ability, language, and so on. It is a concept about usability (accessibility) and has no direct relation to ensuring information security.
Incorrectエ
Reboot is the operation of restarting a system or computer. It is merely an operational action used to recover operation or apply settings, and is not a measure to ensure security from the design stage.
ここがポイント
- Security by Design = the basic principle of building information security in from the upstream processes of planning and design (a system-design approach that includes IoT).
- The key point being tested is a “design philosophy” of incorporating safety from the start, not a measure added afterward; distinguish it from specific technologies such as secure boot (a boot-protection technology).
用語