問62
頻出度★★★
情報セキュリティにおける認証要素は3種類に分類できる。認証要素の3種類として,適切なものはどれか。
令和5年度 ITパスポート試験 問62
This question's explanation and your answers so far.
解説
問 62
Incorrectア
It is wrong because personal information is mixed in. Although personal information (name, address, etc.) is information that identifies the person, it does not belong to the three categories of authentication factors (something only the person knows / holds, or a physical characteristic). Among the correct three types, knowledge information is missing.
Incorrectイ
It is wrong because it includes personal information. Possession information and knowledge information are correct factors, but personal information, which is not an authentication factor, replaces biometric information, so it is inappropriate as a combination of the three types.
Incorrectウ
It is wrong because it includes personal information. Biometric information and knowledge information are correct factors, but personal information, which is not an authentication factor, replaces possession information, so it is inappropriate as a combination of the three types.
- エ
正解 The authentication factors in information security (the clues used to verify a person's identity) are classified into three types: knowledge information, possession information, and biometric information. Knowledge information is something only the person knows (password, PIN, security question); possession information is something only the person holds (IC card, smartphone, one-time token); biometric information is the person's physical characteristics (fingerprint, iris, face, voiceprint). Choice エ, possession information, biometric information, knowledge information, lists exactly these three factors, so it is appropriate. A method that combines two or more factors of different types is multi-factor authentication, which is more secure than using only a single factor.
ここがポイント
- The three categories of authentication factors: knowledge information (what you know), possession information (what you have), and biometric information (what you are). Personal information is not an authentication factor.
- A method that combines two or more authentication factors of different types is multi-factor authentication, which is more secure than a single factor.
用語