問75
頻出度★★★
情報セキュリティの3要素である機密性, 完全性及び可用性と, それらを確保するための対策の例a～cの適切な組合せはどれか。 a アクセス制御 b デジタル署名 c ディスクの二重化
令和6年度 ITパスポート試験 問75
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 75
Incorrectア
Setting a to availability is wrong. Access control is a confidentiality measure that prevents information leakage by restricting users; it is not about availability. Setting c to confidentiality is also wrong, because disk duplication is an availability measure achieved through redundancy.
Incorrectイ
a: availability, b: confidentiality, c: integrity — all three pairings are mixed up. Access control corresponds to confidentiality, the digital signature to integrity, and disk duplication to availability, so all three elements in this option are misaligned.
Incorrectウ
a: integrity and b: confidentiality are reversed. Access control corresponds to confidentiality, while the digital signature is a means of detecting tampering and protects integrity, so the pairings for a and b have been swapped.
- エ
正解 This question asks you to match the three elements of information security (confidentiality, integrity, and availability) with each measure based on what it protects. Measure a, access control, is a mechanism that restricts data access to authorized users only, so it ensures confidentiality. Measure b, the digital signature, lets you verify that the data has not been tampered with (that it stays correct), so it ensures integrity. Measure c, disk duplication, is a form of redundancy that lets you keep using the data without losing it even when one disk fails, so it ensures availability. Therefore the combination is a: confidentiality, b: integrity, c: availability, and the correct answer is エ.
ここがポイント
- The three elements of information security (CIA): confidentiality = only authorized people can view it; integrity = not tampered with and kept correct; availability = usable when needed.
- Typical measures and what they map to: access control → confidentiality; digital signature (tamper detection) → integrity; disk duplication (redundancy) → availability.
用語