問77
頻出度★★★
ある企業では, サーバ室への入室管理を暗証番号で行っていたが, 虹彩認証装置による本人確認を加えることによって, 無許可の者の入室をより確実に防止する対策とした。これは, サーバ室における情報セキュリティ要素のうち, どれを高める対策に該当するか。
令和8年度 ITパスポート試験 問77
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 77
Incorrectア
Availability is the property that authorized persons can use information assets when needed. Redundancy, backups, and power-failure countermeasures using a UPS fall under this. The measure in this question, which restricts who may enter, does not increase availability, so it is incorrect.
Incorrectイ
Integrity is the property that information assets are accurate and free from tampering or destruction. Digital signatures and tamper detection using hash values fall under this. This question concerns a measure to prevent entry and does not guarantee the accuracy of information, so it is incorrect.
- ウ
正解 The correct answer is “ウ Confidentiality”. Confidentiality is the property that only authorized persons can access information assets, while unauthorized persons cannot. In this question, identity verification by iris recognition is added to entry management that previously relied only on a PIN code, more reliably preventing unauthorized persons from entering. Strictly limiting entry to the server room prevents the information assets kept there from being seen or taken away by unauthorized persons, which is exactly a measure that strengthens confidentiality.
Incorrectエ
Non-repudiation is the property that prevents a person who performed an action from later denying having done it. Logging and digital signatures fall under this. This question concerns a measure to prevent the very entry of unauthorized persons, not to prevent later denial of an action, so it is incorrect.
ここがポイント
- The three elements of information security (CIA): confidentiality = only authorized persons can access, integrity = no tampering or destruction, availability = usable when needed.
- Strengthening entry/exit management (such as a PIN code plus biometric authentication) is a measure to prevent access by unauthorized persons and is classified as improving confidentiality.
用語