問88
頻出度★★★
情報セキュリティ対策を, “技術的セキュリティ対策”, “人的セキュリティ対策” 及び “物理的セキュリティ対策” に分類したとき, “物理的セキュリティ対策”の例として, 適切なものはどれか。
令和7年度 ITパスポート試験 問88
This question's explanation and your answers so far.
解説
問 88
Incorrectア
Collecting access logs for the Web server and blocking communication when necessary is a «technical security measure» that protects the information system and the communication itself by technical means. It does not protect a physical space or equipment, so it is not a physical security measure.
- イ
正解 The correct answer is イ. A physical security measure protects «places (physical space)» such as the server room and office rooms, as well as equipment and facilities. In イ, a security level is set for each location and entry/exit is managed with IC cards that grant an access right per employee, so that only authorized people can physically enter a specific room. This is exactly a measure that controls physical access to an area, making it a typical example of a physical security measure.
Incorrectウ
Concluding a confidentiality contract at the time of hiring and providing education and awareness-raising during employment is a «personnel security measure» that governs the awareness and behavior of people (employees). It is not a measure directed at physical objects such as buildings or equipment, so it is incorrect.
Incorrectエ
Deleting an employee's account upon leaving to prevent unauthorized access using their former account is a measure of user management and account management on the system; in any case it is not access control into a physical space or equipment itself, such as a building or room. Therefore it is not a physical security measure.
ここがポイント
- Information security measures are classified into three types: «technical», «personnel», and «physical». A physical measure protects places such as the server room and office rooms, as well as equipment and facilities (entry/exit management, locking, surveillance cameras, earthquake resistance, fire prevention, and so on).
- Entry/exit management with IC cards is a typical example of a physical security measure that lets only authorized people physically enter a specific area. Distinguish it from the following: log collection, communication blocking, and account management are technical measures, while contracts and education are personnel measures.
用語