問74
頻出度★★★
デジタルフォレンジックスの説明として, 適切なものはどれか。
令和7年度 ITパスポート試験 問74
This question's explanation and your answers so far.
解説
問 74
- ア
正解 The correct answer is ア. Digital forensics refers to the technology and the series of procedures by which, when a crime or legal dispute involving computers occurs, the traces left on computers or storage media (logs, deleted emails or files, etc.) are recovered and analyzed, and evidence is collected and preserved in an unaltered form. Its key characteristic is that the entire process of collection and custody (the chain of custody of evidence) is strictly controlled so that the evidence will be admissible in court and similar settings. ア states 'collecting and preserving evidence by means such as recovering deleted emails,' which fully matches this definition.
Incorrectイ
Actually attacking a system to check whether vulnerabilities exist is a description of 'penetration testing,' which is a different thing from digital forensics. Forensics does not attack; it is the activity of collecting and preserving the evidence left behind after the fact.
Incorrectウ
Encrypting the communication path to use a public line as if it were a dedicated line is a description of 'VPN (virtual private network).' It is a communication-confidentiality and connection technology, unrelated to forensics, which collects and preserves evidence.
Incorrectエ
Encrypting the hash value of an email or file with one's own private key is a description of the procedure for generating a 'digital signature.' It is a technology that guarantees integrity and authenticity, different from forensics, which collects and preserves evidence in the event of a crime or dispute.
ここがポイント
- Digital forensics = the technology and procedures for collecting electronic evidence (e.g., by recovering deleted data) and preserving it in an unaltered form when a computer crime or legal dispute occurs.
- Distinction from similar security terms: attacking to check for vulnerabilities = penetration testing; using a public line as a dedicated line = VPN; encrypting a hash with a private key = digital signature.
用語