IPA IP 2024 Question 43
A question IPA Japan published in 令和6年度 ITパスポート試験 公開問題 問43, translated into English. ITPEC is based on the same exams.
Among the risk measures that are taken to maintain and protect the facilities and equipment related to information systems, which of the following lists all and only the appropriate measures that are taken from the viewpoint of facility management?
Explanation
A and B — facility management protects the physical site of the information system: who can enter the computer room, and whether it can be found.
Facility management maintains and protects the buildings, rooms and equipment where information systems run: entry control, power supply (UPS, generators), air conditioning, protection against fire and earthquakes, and keeping the computers’ location from outsiders.
- •A — restricting entry to the computer room to authorized persons is physical access control: facility management
- •B — not putting up signs that show where the computers are makes the room harder for an intruder to find: facility management
- •C — anti-malware software on users’ PCs is a technical security measure for software, not a measure for facilities or equipment
Answer (b)
Why not others:
- •(a) — leaves out B, which also protects the site physically
- •(c) — includes C, a software measure
- •(d) — includes C and leaves out A
Key rule: Facility management covers the physical environment (buildings, rooms, power, air conditioning, entry); measures that work in software belong to information security management.
Service Management · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.