問63
頻出度★★★
PC に保存されたファイルを使用できなくするランサムウェアによる被害を低減させるための対策として, 適切なものはどれか。
令和8年度 ITパスポート試験 問63
This question's explanation and your answers so far.
解説
問 63
Incorrectア
A UPS (uninterruptible power supply) is a device that supplies power for a certain period during a blackout or momentary outage, allowing a safe shutdown and protecting data being worked on. It is a countermeasure against power failures and does not help reduce the damage from ransomware that makes files unusable.
Incorrectイ
Encrypting data is a confidentiality measure that keeps a third party from reading the contents if the data is stolen or leaked. Ransomware, conversely, is an attack that encrypts files and holds them hostage, so even if the user encrypts the data in advance, it does not help restore the files to a usable state after infection.
- ウ
正解 Ransomware is malware that makes files on a PC unusable, for example by encrypting them, and demands money in exchange for recovery. The most effective countermeasure to reduce the damage is “backing up the data.” If you routinely keep backups on a separate medium or disconnected from the network, then even if your files get encrypted you can restore them from the backup without paying a ransom, keeping the impact on your work to a minimum. Therefore the correct answer is ウ.
Incorrectエ
Changing the login password is effective against unauthorized access and impersonation, but it cannot restore files that have already been encrypted and rendered unusable, so it has no effect in reducing the damage caused by the ransomware itself.
ここがポイント
- Ransomware is malware that makes files unusable, for example by encryption, and demands money; the most effective preparation is regular backups on a separate medium (if you can restore, no ransom is needed).
- Choose a countermeasure by identifying what it protects. Distinguish the threat each measure addresses: encryption = confidentiality, UPS = power failure, password change = unauthorized access.
用語