IPA IP 2025 Question 88
A question IPA Japan published in 令和7年度 ITパスポート試験 公開問題 問88, translated into English. ITPEC is based on the same exams.
When information security measures are classified into “technical security measures,” “human security measures,” and “physical security measures,” which of the following is an appropriate example of “physical security measures”?
Explanation
Entry and exit control with IC cards by location security level — controlling who can physically enter which room is a physical measure.
- •Physical measures protect places and equipment: entry control, locks, security cameras, cable locks, disaster protection.
- •Technical measures use technology in systems and networks: access control, encryption, logging, filtering, account management.
- •Human measures work through people: rules, agreements, training and awareness.
Setting a security level for each area, such as the server room and the office, and letting employees in only where their IC card grants access keeps unauthorized people away from equipment and information.
Answer (b)
Why not others:
- •(a) — collecting access logs and blocking communication is done by systems on the network: a technical measure
- •(c) — a confidentiality agreement and staff education work through people: a human measure
- •(d) — deleting accounts is account management in the system: a technical measure (though it follows a personnel procedure)
Key rule: Classify a measure by what it acts on: places and equipment (physical), systems and networks (technical), or people's behaviour (human).
Security · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.