問95
頻出度★★★
情報セキュリティにおける機密性, 完全性及び可用性に関する記述のうち, 完全性が確保されなかった例だけを全て挙げたものはどれか。 a オペレーターが誤ったデータを入力し, 顧客名簿に矛盾が生じた。 b ショッピングサイトがシステム障害で一時的に利用できなかった。 c データベースで管理していた顧客の個人情報が漏えいした。
令和5年度 ITパスポート試験 問95
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 95
- ア
正解 Integrity is the property that information is kept accurate and complete, without unauthorized tampering or inconsistency. Description a is a case where an operator entered incorrect data, causing inconsistencies in the customer list; the accuracy and consistency of the data have broken down. This is exactly a typical example of integrity not being ensured. b is a site being unusable due to a failure = availability, and c is a leak of information = confidentiality, so the only example of integrity is a. Therefore, ア, which lists only a, is the correct answer.
Incorrectイ
This lists a and b, but b is a case where a shopping site was temporarily unavailable due to a system failure, which is a loss of availability—the property that information can be used whenever you want to use it. It is not integrity, so this option, which includes b, is wrong.
Incorrectウ
This lists only b, but as stated above, b is an example of impaired availability, not an example of integrity. It is also inappropriate in that it omits a, which is the example of integrity.
Incorrectエ
This lists only c, but c is a case where customers' personal information was leaked—information was seen by unauthorized persons = a loss of confidentiality. It is a different element from integrity, so it is wrong.
ここがポイント
- The three elements of information security (CIA)—distinguish the definitions of confidentiality (only authorized persons can access), integrity (information is accurate and complete, with no tampering or inconsistency), and availability (can be used when needed).
- The way of thinking for classifying cases into the three elements—map 'data inconsistency / error' = integrity, 'unusable / stopped' = availability, and 'leakage / unauthorized viewing' = confidentiality.
用語