問95
頻出度★★★
SQL インジェクションの対策などで用いられ，処理の誤動作を招かないように，利用者が Web サイトに入力した内容に含まれる有害な文字列を無害な文字列に置き換えることを何と呼ぶか。
令和8年度 ITパスポート試験 問95
This question's explanation and your answers so far.
解説
問 95
Incorrectア
MAC address filtering is an access control technology that uses a device's unique MAC address to control whether connection to a wireless LAN or similar is permitted; it has nothing to do with making input character strings harmless.
- イ
正解 Choice イ, Sanitizing, is correct. Sanitizing (harmless-conversion processing) refers to replacing with harmless character strings, or removing, the dangerous characters such as “'”“<”“>” that have special meaning to programs or databases and that are contained in data entered by a user. This prevents the input from being mistakenly interpreted as an SQL statement or HTML, thereby preventing attacks such as SQL injection and cross-site scripting. The statement in the question, “replacing harmful character strings with harmless character strings”, corresponds exactly to the definition of sanitizing.
Incorrectウ
Striping is a RAID 0 technology that distributes data across multiple magnetic disks to speed up writing; it concerns storage performance and has nothing to do with making input values harmless.
Incorrectエ
Social engineering is an attack technique that exploits gaps in people's psychology or behavior to steal confidential information such as passwords; it is an attacker-side concept rather than a countermeasure, and is unrelated to replacing character strings.
ここがポイント
- Sanitizing replaces or removes special characters in input values, turning them into harmless strings; it is an input-side countermeasure that prevents SQL injection and cross-site scripting.
- Do not confuse it with similar terms (MAC address filtering = access control, striping = RAID, social engineering = attack technique).
用語