IPA IP 2026 Question 77
A question IPA Japan published in 令和8年度 ITパスポート試験 公開問題 問77, translated into English. ITPEC is based on the same exams.
A certain company controlled entry to its server room with a PIN, but added identity verification with an iris authentication device as a countermeasure to prevent entry by unauthorized persons more reliably. Among the elements of information security in the server room, which of the following does this countermeasure enhance?
Explanation
Confidentiality — keeping unauthorized people out of the server room keeps the information there from being reached by anyone not authorized.
Confidentiality means that information can be accessed only by those who are authorized. A PIN can be leaked or watched and then used by someone else. An iris scan checks that the person at the door is the registered individual, so an outsider who knows the PIN still cannot get in. The measure makes it harder for unauthorized people to reach the servers and data in the room, which raises confidentiality.
Answer (c)
Why not others:
- •(a) — availability is being able to use the system when needed (redundancy, backups, UPS); stricter entry control does not make the servers more available
- •(b) — integrity is keeping information accurate and complete, by preventing and detecting tampering; entry control is about who can reach the information
- •(d) — non-repudiation is being able to prove later that someone performed an action, so they cannot deny it (digital signatures, logs); this measure keeps people out rather than proving who did what
Key rule: Measures that restrict who can see or reach information (access control, entry control, encryption) raise confidentiality; redundancy raises availability; tamper prevention and detection raise integrity.
Security · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.