問96
頻出度★★★
機密情報の取得などを目的として，特定の組織や個人に対して，複数の攻撃手法を使うなどして長期間にわたり継続的に攻撃を行うという特徴をもつ，サイバー攻撃はどれか。
令和8年度 ITパスポート試験 問96
テクノロジ系セキュリティ › 情報セキュリティ
This question's explanation and your answers so far.
解説
問 96
- ア
正解 The correct answer is ア “APT attack”. APT stands for Advanced Persistent Threat. It targets a specific organization or individual, combines multiple attack methods such as phishing, malware, and exploitation of vulnerabilities, and continuously launches attacks over a long period with the aim of stealing confidential information and the like. Only the APT attack satisfies all the conditions stated in the question: “a specific organization or individual”, “multiple attack methods”, “continuous over a long period”, and “obtaining confidential information”.
Incorrectイ
A DDoS attack sends a huge volume of requests simultaneously from many terminals, overloading the server or network to bring the service down. Its aim is to disrupt the service, not to obtain confidential information, and it does not fit the question's features of being long-term, continuous, or using multiple methods.
Incorrectウ
A zero-day attack exploits the defenseless window after a software vulnerability is discovered but before a patch is released. It is a concept describing the “timing” of exploiting a vulnerability, which differs from the question's features of long-term, continuous, multi-method attacks against a specific organization.
Incorrectエ
A password list attack reuses combinations of IDs and passwords (a list) leaked somewhere else to attempt unauthorized logins to other services. It broadly targets users who reuse the same credentials, which does not match the question's features of long-term, continuous, multi-method attacks against a specific organization.
ここがポイント
- APT (Advanced Persistent Threat) = an advanced targeted attack carried out against a specific target over a long period and continuously, using multiple methods. The keywords are “aim of stealing confidential information”, “long-term and continuous”, and “multiple methods”.
- Distinguish attack methods by their aim. Organize and memorize them as: DDoS = disrupting the service, zero-day = the timing of exploiting an unpatched vulnerability, password list = reusing leaked authentication credentials.
用語