問85
頻出度★★★
IoT機器におけるソフトウェアの改ざん対策にも用いられ，OSやファームウェアなどの起動時に，それらのデジタル署名を検証し，正当であるとみなされた場合にだけそのソフトウェアを実行する技術はどれか。
令和5年度 ITパスポート試験 問85
This question's explanation and your answers so far.
解説
問 85
Incorrectア
A GPU is a processing unit (graphics processor) that performs image processing at high speed; it is not a technology for verifying digital signatures or countering tampering.
Incorrectイ
RAID is a technology that combines multiple magnetic disks to add redundancy and speed, thereby improving reliability and performance. It is a safeguard against disk failure, not a tampering countermeasure based on signature verification at startup.
- ウ
正解 Choice ウ, Secure boot, is correct. Secure boot is a mechanism that, at device startup, verifies the digital signatures attached to the OS, firmware, and the like, and executes the software only when it is confirmed to be legitimate (not tampered with). Tampered software that fails signature verification is refused execution at the boot stage, so secure boot is also used as a countermeasure against software tampering in IoT devices. It exactly matches the stem (signature verification at startup, plus execution only when legitimate).
Incorrectエ
Reboot is merely the operation of restarting a device; it is not a mechanism that verifies signatures and executes only legitimate software. It has no tampering-countermeasure function.
ここがポイント
- Secure boot: a mechanism that verifies the digital signatures of the OS and firmware at startup and runs them only when confirmed legitimate, thereby preventing tampered software from booting.
- Grasp the idea that verifying a digital signature lets you confirm legitimacy (whether or not something has been tampered with).
用語