問92
頻出度★★★
ゼロトラストセキュリティの考え方に基づいた情報セキュリティ対策の例として, 適切なものはどれか。
令和8年度 ITパスポート試験 問92
This question's explanation and your answers so far.
解説
問 92
Incorrectア
Placing a firewall at the boundary between the Internet and the internal network to block threats is the “perimeter-based defense” concept, which regards the inside of the boundary as safe; this is the exact opposite of zero trust, which does not unconditionally trust the internal network.
- イ
正解 Zero trust is the concept of “never trust, always verify”: it does not trust something unconditionally just because it is on the internal network, and it verifies every access regardless of whether that access originates internally or externally. Option イ requires two-factor authentication for access to information resources on the network whether the access comes from the internal or the external network, and it always performs identity verification without depending on the network location, which matches the zero trust concept. Therefore イ is correct.
Incorrectウ
Promptly applying a security patch for a vulnerability is appropriate vulnerability management, but it is a general security measure and does not express the concept unique to zero trust (verifying access regardless of location).
Incorrectエ
Installing anti-malware software only on PCs that access the Internet rests on the idea of implicitly trusting that PCs on the internal network are safe, which goes against the zero trust concept of trusting nothing.
ここがポイント
- Zero trust is the concept of “never trust, always verify”; it does not unconditionally trust even the internal network and performs authentication and authorization regardless of the location of the access source.
- Grasp the contrast with the traditional “perimeter-based defense (which regards the internal network as safe).” Measures that protect at the boundary (such as firewalls) are not examples of zero trust.
用語