情報システムに関する施設や設備を維持・保全するために行うリスク対策のうち,ファシリティマネジメントの観点から行う対策として,適切なものだけを全て挙げたものはどれか。 a コンピュータ室への入室を,認可した者だけに限定する。 b コンピュータの設置場所を示す標識を掲示しない。 c 利用者のPCにマルウェア対策ソフトを導入する。
令和6年度 ITパスポート試験 問43
This question's explanation and your answers so far.
問 43
Incorrectア
ア lists only a. Item a is indeed a facility management measure, but item b, not posting signs that indicate the installation location, is also an appropriate measure that protects facilities and equipment from physical threats. Because it omits b, it does not list all of them, so it is incorrect.
- イ
正解 The correct answer is イ (a, b). Facility management is the management activity of maintaining and protecting, in optimal condition, the facilities and equipment that support an information system, such as buildings, power supply, air conditioning, and the computer room. Item a, restricting entry into the computer room to authorized persons only, is a measure that controls physical access to the facility to protect equipment, and it fits the perspective of facility management. Item b, not posting signs that indicate the location where the computers are installed, is also a measure that hides the location of important equipment from outsiders to protect it from physical threats such as destruction or theft, and it fits the perspective of protecting facilities and equipment. Therefore only a and b are appropriate, and イ, which lists all of them, is the correct answer.
Incorrectウ
ウ lists a and c. Item c, installing anti-malware software on users' PCs, is an information-security measure at the software level, not a facility management measure that maintains and protects buildings and equipment. It includes the incorrect c and lacks the appropriate b, so it is incorrect.
Incorrectエ
エ lists b and c. Item b is appropriate, but item c is an information-security measure outside facility management, namely anti-malware protection, and is not appropriate. Moreover, it lacks the appropriate a. Because it includes the incorrect c and omits a, it is incorrect.
- Facility management refers to activities that maintain and protect, in optimal condition, the facilities and equipment that support an information system, such as buildings, power supply, air conditioning, and the computer room. Physical and environmental measures such as entry/exit control and concealing the installation location fall within its scope.
- Installing anti-malware software is an information-security measure that relies on software, and it is not included in the scope of facility management, which deals with facilities and equipment; this distinction is the key point of this question.