令和7年度 ITパスポート試験 問16

※ Our check while writing this explanation could not fully confirm the published answer; scoring follows IPA's official key.

• ×Incorrectア

  This lists all of a, b, and c, but b (creating malware that disables an ID and password) is regulated not by the Unauthorized Access Prohibition Act but by the crime of creating unauthorized command electromagnetic records (the virus-creation offense) under the Penal Code. It is wrong because it includes b.

• ○イ

  正解 The Unauthorized Access Prohibition Act regulates the act of illegally using another person's user ID and password (identification code) over a network, as well as illegally obtaining, storing, or providing such identification codes. Item a, “providing them to a third party without the person's consent and without a legitimate reason,” constitutes illegal provision of identification codes and is regulated by the Act. Item c, “using them without the person's consent to view email on the mail server,” is a typical unauthorized access act using another person's identification code, which is exactly the core act the Act prohibits. Therefore only a and c are regulated, and the correct answer is イ (a, c).

• ×Incorrectウ

  This is the combination of b and c. Item c is indeed regulated, but b is not regulated by the Unauthorized Access Prohibition Act (it falls under the virus-creation offense in the Penal Code). It also omits a, which is regulated, so it is wrong.

• ×Incorrectエ

  This lists only c, but a (the act of providing identification codes to a third party without consent and without a legitimate reason) is also regulated by the Unauthorized Access Prohibition Act. It is wrong because it omits a and is therefore incomplete.