Security
243 questions · IT Passport · 201–243
Among the descriptions concerning confidentiality, integrity, and availability in information security, which of the following lists all and only the examples in which integrity was not ensured?
Which of the following is an appropriate description of PCI DSS in information security?
Which of the following is an appropriate example of a measure for reducing the damage, assuming a case where damage has been suffered from ransomware?
In the planning, operation, performance evaluation, and improvement of an ISMS, which of the following is implemented in performance evaluation?
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning the keys used in public key cryptography?
When Company A and Company B, each of which has a public key and a private key, send and receive information, it was decided that the information would be encrypted before it is sent, so that its content would not be known even if the communication were intercepted by others.
When information is sent from Company A to Company B, Company A sends Company B the information encrypted by using A. Company B decrypts the information received from Company A with B and extracts the information.
Among A through D, which of the following lists all and only the appropriate items that can be achieved by installing a firewall?
Which of the following lists all and only the effects that are obtained by attaching a digital signature to an e-mail?
In the entry and exit control of an area protected by security, such as a server room, which of the following is used as a measure to prevent tailgating, where other persons also enter the room together on the authentication of one person?
Which of the following is an appropriate description concerning biometric authentication?
When risk treatment in risk management for information security is classified into the four (4) categories of risk avoidance, risk sharing, risk mitigation, and risk retention, which of the following is the category of taking out cyber insurance in preparation for damage when an information leakage occurs?
Company A performs user authentication for its internal system by using employees’ user IDs and passwords. In order to strengthen security, the company has decided to add one (1) new authentication function to this system. Among the authentication functions A through C, which of the following lists all and only the functions that make the authentication two-factor authentication when added to this system?
When an information security policy is composed of three (3) documents, namely, basic policy, standards, and procedures, which of the following is the appropriate explanation concerning these documents?
When risk assessment in information security is divided into three (3) processes, namely, risk identification, risk analysis, and risk evaluation, which of the following is the most appropriate description concerning risk analysis?
Which of the following is an example of an act that corresponds to social engineering?
Which of the following is an attack that diverts a large amount of authentication information obtained illegitimately, such as by stealing it from a website other than the attack target, and attempts to intrude illegitimately into the targeted website?
Immediately after a certain website on the Internet was viewed on a business PC connected to the wireless LAN network installed in the company, events occurred that suggest the possibility of infection with malware, such as the web browser suddenly terminating and unknown files being created. Which of the following is the appropriate action that the user of this PC should take first?
Which of the following is an attack that leads users to a fake site by overwriting the management information stored on a server that provides the service of matching domain names with IP addresses on the Internet?
Which of the following is an appropriate example of a physical security measure that prevents unauthorized entry into a server room by tailgating?
Which of the following is an appropriate example of two-step authentication in an information system?
Which of the following is the security standard concerning the protection of credit card information that was established for the purpose of handling credit card member data securely?
A Web server on the Internet is accessed from the browser of a PC or a smartphone via an access point of a wireless LAN. Which of the following is an appropriate description concerning SSL/TLS and WPA2 that are used for the encryption of communication in this case?
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning information security in ISMS?
Information security is the preservation of confidentiality, integrity and A of information. In addition, it may also involve the preservation of other properties, such as authenticity, accountability, non-repudiation, and B.
In a communication environment where there is a risk of eavesdropping in all communication sections, which of the following is the most appropriate method of sending a file whose content should not be known by anyone other than the recipient as an attachment to an e-mail?
Among the risk countermeasures concerning IoT devices, which of the following can increase tamper resistance in the event that an IoT device is stolen?
There is an IoT system that consists of a group of IoT devices and an IoT server that manages them. When all the IoT devices encrypt communications by using the same key, and the IoT server decrypts the communications with a key that is different from the key that the IoT devices have, which of the following is this encryption technology?
Which of the following is an appropriate description concerning “SECURITY ACTION,” a scheme that IPA established to accelerate the spread of information security measures in small and medium-sized enterprises?
In the security of a wireless LAN, which of the following is a mechanism with which, when an access point receives a connection request from a terminal such as a PC, it restricts connection on the basis of information unique to the terminal that has requested the connection?
Among the tasks A through D below, which of the following is the list that contains all and only the tasks that are included in risk assessment in risk management?
Which of the following is used in targeted attacks such as illegally obtaining important information from a specific PC, and operates the target PC of the attack remotely to make it send and receive files, execute commands, and do other such things?
Which of the following is an appropriate description concerning an information security policy?
Which of the following is an attack that exploits the characteristics of e-mail in HTML format?
What is the term for performing the work called mining for obtaining crypto assets (virtual currency) by using other people’s computers without being noticed?
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning the physical characteristics used in biometric authentication?
As the physical characteristics of the person in biometric authentication, those for which A is difficult and B is small are superior.
When risk treatment is classified into transfer, avoidance, reduction, and retention, which of the following is the category of the treatment below?
[Treatment]
As a countermeasure against information leakage from documents on desks in the workplace, a clear desk at the time of leaving the office was introduced.
Among the following implementation items in the establishment, implementation, maintenance and continual improvement of an ISMS, which of the following is performed first?
Which of the following is a mechanism for the remote, integrated management of mobile terminals such as smartphones that are lent to employees, and has functions such as security settings, and locking or initializing a terminal when it is lost?
Which of the following is the most appropriate explanation of two-factor authentication?
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning information security in ISMS?
Information security is the preservation of confidentiality, A and availability of information. In addition, it may also involve the preservation of other properties, such as B, accountability, non-repudiation, and reliability.
Which of the following represents the property of hardware or other such things that makes it difficult for the internal data to be tampered with, decoded, extracted, or otherwise attacked illegitimately from outside?
In a wireless LAN, which of the following is an appropriate countermeasure against eavesdropping by interception of radio waves between a PC and an access point?