無線LAN のセキュリティ対策に関する記述として, 適切なものはどれか。
令和7年度 ITパスポート試験 問90
This question's explanation and your answers so far.
問 90
Incorrectア
Incorrect. The ID that groups and manages multiple access points is the ESSID (Extended Service Set Identifier). API (Application Programming Interface) is an interface specification for calling a software's functions from outside; it is not an ID that bundles wireless LAN access points together.
Incorrectイ
Incorrect. The function that hides a wireless LAN network by making the access point stealthy is SSID hiding (not broadcasting the ESSID). SSH (Secure Shell) is a protocol for securely operating a remote computer over encrypted communication; it is not a function for hiding a network.
Incorrectウ
Incorrect. The function that rejects connections from devices other than those whose MAC addresses are registered is MAC address filtering. VPN (Virtual Private Network) is a mechanism that builds an encrypted virtual private line over a public network to communicate securely; it is not a function that restricts connections based on MAC addresses.
- エ
正解 The correct answer is エ. WPA2 (Wi-Fi Protected Access 2) is a standard for encrypting wireless communications. It improved on the vulnerabilities of WEP (Wired Equivalent Privacy), an early encryption method, and is a more reliable technology. WEP had flaws in how it generated keys and could be cracked in a short time, so its successors appeared: WPA, which adopted TKIP or AES, and WPA2, which uses AES (CCMP) as its standard. The statement “a wireless communication encryption technology with higher reliability than WEP” correctly describes WPA2.
- WPA2 is a wireless LAN encryption standard that improved on WEP's vulnerabilities; reliability increases in the order WEP < WPA < WPA2.
- Distinguishing wireless LAN security terms: the network identifier is the ESSID/SSID, terminal restriction is MAC address filtering, and SSH and VPN are technologies for other purposes.