May 2026
Intermediate
496 pages
12h 11m
Japanese
book
実践 ハイブリッドクラウド・セキュリティアーキテクチャ ―ゼロトラスト原則を用いたセキュリティ設計の実践的手法
by Mark Buckwell, Stefaan Van daele, Carsten Horst, 石川 朝久
Content preview from 実践 ハイブリッドクラウド・セキュリティアーキテクチャ ―ゼロトラスト原則を用いたセキュリティ設計の実践的手法
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
付録
C
練習問題の正解
439
7. 誤
セキュリティ保証活動はDay0、Day1 運用中だけでなく、Day2運用においても変更のたびに必要で
す。
8. b
悪用ユースケースは業務ロジックの欠陥を定義し、対応する対策とテストにつながります。
9. a、b
Cloud Center of Excellence（CCoE）は、クラウドリファレンスアーキテクチャに含める製品を認定
し、クラウドサービスプロバイダをまたいだセキュリティ実践とポリシーの一貫性を推進します。
11
章：セキュリティ運用
1. a、b
RASCI（Responsible, Accountable, Supporting, Consulted, Informed）マトリックスは、ある活動の責
任を「実行責任」と「サポート責任」に分けます。活動の提供は複数人で行われることがありますが、
運用チームは、複雑性を増やしてさらに細かい活動へ分解するのを避けたいので、1人が主導し、他が
支援する形を取ります。
2. 誤
二者間で最良のRACIは、双方の責任が明示された合意です。そうでないと混乱や争いにつながり
得ます。
3. 誤
プロセスは「何を」「なぜ」行うかを定義します。手順や作業指示が「どのように」活動を完了するか
を定義します。
4. a
ステートチャート図は、データの状態変化を実施するために必要な「作業手順」ではなく、「プロセ
ス」を特定するのに有用です。
5. c
権限分掌マトリックスは、別の当事者の承認なしにある当事者が活動を実施すること
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.