問55
頻出度★★★
IoTのセキュリティに関する次の記述中の a，b に入れる字句の適切な組合せはどれか。 ネットワークカメラの画像を盗み見される脅威のうち，ネットワークカメラへの [ a ] 対策として，第三者がカメラにアクセスして映像を閲覧できないようにするためには，[ b ] で利用しない。
令和8年度 ITパスポート試験 問55
This question's explanation and your answers so far.
解説
問 55
Incorrectア
b’s “initial password” is appropriate, but a’s “DDoS attack” is wrong. A DDoS attack is a threat in which a huge volume of access is sent from many terminals to stop or disrupt a service; it is not the threat of a third party peeping at (viewing) the video. It does not match the threat in the question, so it is inappropriate.
Incorrectイ
a’s “DDoS attack” does not match the threat of peeping at the video, so it is wrong. b’s “wired line” is also wrong: whether or not it is used over a wired line does not affect whether a third party can access it (whether they can log in). Both a and b are inappropriate.
- ウ
正解 The correct answer is ウ (a: unauthorized intrusion, b: initial password). The question asks for a countermeasure that “prevents a third party from accessing the camera and viewing the video”, which addresses the threat of an unauthorized person breaking into the camera to operate and view it — that is, a countermeasure against a = unauthorized intrusion (unauthorized access). Its concrete measure is b: for IoT devices such as network cameras, the factory-set initial password (default password) is often published or easily guessed for each model, so if it is used as is, a third party can easily log in. Therefore, “not using the initial password as is (changing it to a strong password before use)” serves as a countermeasure against unauthorized intrusion. The combination a = unauthorized intrusion, b = initial password is correct.
Incorrectエ
a’s “unauthorized intrusion” is correct, but b’s “wired line” is wrong. “Not using it over a wired line” does not help prevent unauthorized access by a third party and is meaningless as a countermeasure. The key to preventing access is changing the initial password, not the type of line.
ここがポイント
- A basic security measure for IoT devices (network cameras, etc.) = change the factory-set initial password (default password) before use. It is easily published or guessed, and leaving it unchanged makes it an entry point for unauthorized access.
- Distinguish the types of threats = peeping at the video / unauthorized access is “unauthorized intrusion (unauthorized access)”, while disrupting a service with massive access is a “DDoS attack”. Choose the countermeasure that matches the threat being asked about.
用語