問94
頻出度★★★
情報セキュリティ対策を, “技術的セキュリティ対策”, “人的セキュリティ対策” 及び “物理的セキュリティ対策”に分類したとき, “物理的セキュリティ対策”の例として, 適切なものはどれか。
令和8年度 ITパスポート試験 問94
This question's explanation and your answers so far.
解説
問 94
Incorrectア
Establishing rules that include penalties and conducting periodic education for the personnel involved to ensure compliance is an example of a personnel security measure, which protects information through people. It is not a measure that protects the physical environment or equipment.
- イ
正解 Physical security measures protect the physical environment such as buildings, equipment, and devices, and safeguard systems and information assets from disasters and physical damage. Option イ, preparing a backup system at a remote location, is a disaster countermeasure that lets service continue on physical facilities set up at a distant site even if the main system is physically damaged by a disaster such as an earthquake, fire, or flood; this is a representative example of a physical security measure. Therefore, イ is correct.
Incorrectウ
Informing employees about cyberattack methods and countermeasures (awareness and education) is an example of a personnel security measure. It works on employees' awareness and behavior and is not a physical measure.
Incorrectエ
Introducing anti-malware software and keeping the definition files up to date is an example of a technical security measure that prevents threats through software or mechanisms. It is not a measure concerning physical equipment or environment.
ここがポイント
- Information security measures can be classified into three types: technical, personnel, and physical. Technical = software or mechanisms (anti-malware, encryption, etc.); personnel = rules, education, and awareness; physical = buildings, equipment, devices, and preparation against disasters.
- Remote (off-site) backup is classified as a physical security measure intended to keep service running even when a disaster causes physical damage.
用語