Questions IPA Japan published in 令和2年度 10月 ITパスポート試験 公開問題, translated into English, with IPA's answers. ITPEC is based on the same exams, so they are good practice for ITPEC too.
Same question on ITPEC: Oct 2025 Q99
Which of the following is the appropriate combination of words or phrases to be inserted into blanks A and B in the description below concerning documentation that is created in the procurement of an information system?
The document that sets out the overview, what is being asked for, procurement conditions, and other such information for an information system to be procured and asks for a proposal to be submitted is the A. And the document that asks for the provision of relevant information by indicating the computerization purpose, a business overview, and other such information is the B.
Companies are required to practice so-called compliance, conducting their activities in accordance with basic rules such as social norms, not to mention complying with laws and regulations, in order to live up to the trust of society. Among A through D, which of the following lists all and only the items that must be considered as compliance?
When the process of creating a new business in management of technology is classified into four stages, research, development, commercialization, and industrialization, there are barriers such as the launch of a new market and the appearance of competing products to achieving industrialization from commercialization and contributing to the business performance of the company. Which of the following is the most appropriate term that refers to these barriers?
Company A, which runs a nationwide chain of convenience stores, has accumulated at its head office detailed sales data of each store over the past 10 years. The company wants to build a system that analyzes the relationship between this sales data, weather data for the past 10 years, and information on events in the neighborhood of each store, grasps the correlation between weather conditions, event information, and the sales volume of products, and forecasts the sales of each store with higher accuracy from weather forecasts up to one week ahead and event information. Which of the following is the most appropriate technology to be used in this case?
Same question on ITPEC: Apr 2025 Q75 +2 more
Which of the following is the most appropriate example of standardization in the manufacturing industry?
Which of the following has the functions of quickly and effectively searching and analyzing various kinds of accumulated data, such as accounting, sales, purchasing, and customer data, and is intended to support decision making by management executives and others?
Same question on ITPEC: Oct 2024 Q98 +1 more
At power companies, the amount of electricity consumed by each household is measured remotely by communicating with electrical meters that are connected to the Internet, instead of measured by meter readings by a person. Which of the following is a term that represents the mechanism where a range of devices are connected to the Internet and utilize information in cases such as this?
Same question on ITPEC: Apr 2026 Q99 +2 more
Which of the following are international development targets that are composed of 17 objectives set by the United Nations in order to achieve a sustainable world?
Same question on ITPEC: Nov 2021 Q100
Which of the following is the most appropriate as a use case of IoT?
Same question on ITPEC: Oct 2022 Q95
When a guest arrives at a certain restaurant, their name is registered in a visitor list. When the guest is allocated a seat, both the guest list and seating availability are referenced. Which of the following is the most appropriate DFD to represent this series of actions?
At Company A, two forms are being compared and considered for the development of a program whose work up to the design was done by Company A: a form in which the development is entrusted to Company B on the basis of a contract for work, and a form in which it is performed by Mr. C, who is dispatched from Company B on the basis of a dispatch contract. When no provision concerning the ownership of the copyright of the developed program is specified in the contract between the companies, which of the following shows to whom the copyright belongs?
Among the inappropriate acts A through C related to the handling of information, which of the following lists all and only those that correspond to the prohibited acts defined in the Act on the Prohibition of Unauthorized Computer Access?
Same question on ITPEC: Apr 2024 Q90 +1 more
Which of the following is the most appropriate example of a use of a wearable device?
Among the various results A through C produced in developing a new product, which of the following lists all and only those that can be subject to protection under the Patent Act?
Same question on ITPEC: Apr 2025 Q83 +1 more
Several companies want to collaborate on research and development to develop a new business. Which of the following is an appropriate organization that is formed through collaborative investment?
Same question on ITPEC: Apr 2026 Q83 +2 more
Which of the following is the most appropriate explanation of user experience (UX)?
Same question on ITPEC: Oct 2025 Q90 +1 more
Which of the following is one of the technologies used in deep learning, and represents a mathematical model of the circuits in the human brain?
Worker dispatching is divided into two types: ordinary dispatching, and temp-to-perm dispatching, which anticipates future employment. In concluding a worker dispatch contract of the former type, which of the following is an appropriate condition for accepting a dispatched worker that the client company requests from the dispatching company?
Same question on ITPEC: Apr 2022 Q84
Which of the following often uses a chart with relative market share for the horizontal axis and market growth rate for the vertical axis, and analyzes the strategic positioning of a company’s products or business?
Same question on ITPEC: Apr 2026 Q91
The fields of utilization of AI include voice recognition, image recognition, and natural language processing. Which of the following is the most appropriate example of a system that uses both voice recognition and natural language processing?
Same question on ITPEC: Apr 2025 Q95
Which of the following is the most appropriate explanation of the relation between business strategy and information systems strategy?
The Basic Act on Cybersecurity is a law that establishes basic principles concerning measures related to cybersecurity, and specifies the responsibilities, etc. of the national government and local governments. Among the descriptions A through D, which of the following lists all and only those that this law specifies as basic measures of the national government?
Same question on ITPEC: Apr 2026 Q69 +2 more
Company A is a large company with multiple offices nationwide, and it created BCP that envisaged the total destruction of the head office building in a large natural disaster. In consideration of the purpose of the BCP, which of the following is Company A’s most appropriate BCP?
Which of the following is a mechanism that unifies the formats of business transaction information and the communication procedures between companies, and exchanges information electronically?
Same question on ITPEC: Apr 2025 Q96
Which of the following is a term that represents the practical verification of a new concept or idea before development?
Same question on ITPEC: Oct 2025 Q95 +1 more
Which of the following is the appropriate term that represents a method for achieving automation and improved efficiency by replacing humans with a software robot to perform routine office work?
Same question on ITPEC: Apr 2026 Q68 +2 more
Which of the following represents the “E” in ROE that is an index for the measurement of a company’s profitability?
Same question on ITPEC: Apr 2022 Q96
Which of the following is a term for a model where through a service or mechanism matching users and providers, idle assets, such as vehicles, residences, and clothes, that are owned by individuals or companies are lent to others, or services such as providers doing shopping on behalf of another person or giving language lessons in their spare time are provided?
Same question on ITPEC: Apr 2024 Q91
An EC site handles a wide range of user inquiries via chat with a mechanism where operators provide a response. It decides to use a new mechanism where software learns from the content of users’ past chats, infers an appropriate response from the flow of the conversation and provides an automatic response. Which of the following is the most appropriate technology that is used in the new mechanism?
Company A, which conducts mail-order sales on the Internet, decided to place an advertisement for its product Y in an e-mail magazine issued by another company as a sales promotion measure. The advertisement works in such a way that when a subscriber of the e-mail magazine clicks the URL in the advertisement, the page of the product is displayed. When the assumptions of this sales promotion measure are as shown in the table, at least how many yen must the selling price of product Y be so that the balance of income and expenditure of this sales promotion measure does not become negative? Here, the purchase of product Y by a purchaser is limited to one (1) unit per person. In addition, other costs are not considered.
Same question on ITPEC: Oct 2025 Q71 +2 more
Which of the following is the expression that calculates operating profit?
A company is going to develop a program for realizing a new service that uses fintech. For this purpose, it planned an event where a team is formed by gathering designers, programmers, and others, who work intensively on program development over several days and compete with each other on the results. Which of the following is the most appropriate term that represents such an event?
Same question on ITPEC: Apr 2026 Q47 +2 more
Among a series of tests of software, which of the following is conducted mainly by the user who orders the development of the software?
The software to be developed is divided beforehand into small units of function that can be developed in a relatively short period, and the software is completed by repeatedly releasing each function every time its development is finished. Which of the following is the development method that focuses on being able to respond quickly to changes in the business environment and requests from users, by reviewing the priority and the content of the function to be developed next when the development of one function is finished?
Which of the following is a compilation of best practices that focuses on the continual measurement and improvement of the quality of the IT services provided, from the perspectives of both the service provider and the customer?
Same question on ITPEC: Nov 2021 Q62
The IT department of Company A plans to extend inquiry hours to 24 hours in order to improve the availability of the help desk. Company A agrees to the proposal by Company B that offers 24-hour support through automatic response during overnight hours by a chatbot. Which of the following is an appropriate document to be used for this agreement?
Activities in project management include project integration management, project scope management, project schedule management, project cost management, and the like. Activities in project integration management include determining resource allocation and coordinating trade-offs between competing objectives and alternatives. In a system development project, which of the following is an appropriate activity in project integration management when a function that is not in the initial plan is to be added?
Same question on ITPEC: Oct 2022 Q64
Which of the following is the appropriate combination of terms or phrases to be inserted into blanks A and B in the description below concerning the purpose of system audits?
With regard to the appropriate design and operation of the control for risks concerning information systems, the system auditor A contributes to the realization of IT governance by performing B.
Same question on ITPEC: Nov 2021 Q57
After the detailed design of an information system is complete, it is decided to outsource programming to an outsourcing contractor with clearly defined specifications, deliverables, and scope of work. Which of the following is the most appropriate management activity of the project manager of the ordering company?
At a call center, as a system that supports operators who handle telephone inquiries from customers, AI that recognizes the speech of the conversation between a customer and an operator and displays candidate answers to the customer’s inquiry on the screen of the operator’s PC was introduced. The number of inquiries handled per day is 1,000, and they were divided into two (2) groups, A and B, according to the content of the inquiries. When the number of inquiries handled and the handling time of each group before and after AI introduction are as shown in the table, by what percentage could the time for handling the 1,000 inquiries of one day be reduced after AI introduction?
Number of inquiries handled and handling time by group before and after AI introduction
Before AI introduction
After AI introduction
In which stage of the system development process is the following activity performed?
Users who are familiar with the actual business operations are asked to participate, and the specific methods of using the system to be developed are analyzed.
Which of the following is the most appropriate term that represents an initiative in which developers and operators cooperate with each other and proactively adopt tools such as those for automating version management and the transition to production, so that requests such as specification changes can be responded to quickly and flexibly?
Same question on ITPEC: Oct 2023 Q61
Which of the following is an appropriate role of the service desk handling incident management when a system failure occurs?
Same question on ITPEC: Apr 2023 Q65 +1 more
When an external systems auditor conducts a systems audit of a company as an outsourcing service, which of the following is an appropriate action by the external systems auditor?
A company has decided to introduce a chatbot in order to improve the service of its service desk. Which of the following is the most appropriate description concerning a chatbot?
Which of the following is an appropriate measure for clarifying the rules of communication among project members?
Which of the following is the most appropriate work that is performed in reverse engineering?
Same question on ITPEC: Apr 2024 Q65
The information system department implements the development and operation of the order entry system and the accounting system. The user of the order entry system is the sales department and the user of the accounting system is the accounting department. Which of the following is the appropriate description concerning internal control of financial reports?
In examining the goals and other such matters of a project, which of the following is the technique that divides the results of ideas put forward by a group into groups and organizes them systematically?
In a system development project, there is a risk that the completion of the test process is delayed because the delivery of the PCs used in the test process is delayed, and countermeasures were decided. When risk responses are classified into the four (4) categories of avoidance, mitigation, acceptance, and transfer, which of the following is the most appropriate description that corresponds to acceptance?
What are the shortest required days and the longest required days of the process in the figure?
Which of the following is an attack that exploits the characteristics of e-mail in HTML format?
An “Employee” table that is to be managed with a relational database is designed by using the items shown below. Which of the following is a redundant item that can be derived from other items?
Employee
Same question on ITPEC: Oct 2024 Q36 +1 more
When a document file attached to a received e-mail is opened on a PC, the PC begins to behave abnormally. Which of the following is an appropriate suspected attack?
In a computer that uses virtual memory, it was found that the processing performance is decreasing because contents are frequently swapped between main memory and auxiliary storage. Which of the following is the most appropriate countermeasure to remove the cause of this decrease in processing performance? Here, the computer has only one (1) auxiliary storage device.
What is the term for performing the work called mining for obtaining crypto assets (virtual currency) by using other people’s computers without being noticed?
Which of the following is the appropriate combination of terms to be inserted into blanks A and B in the following description concerning measures for improving server performance?
In a certain system, the increase in the processing time of the server has become a problem as the number of processed transactions increases. As a measure for improving the processing performance of the server, handling this by increasing the number of servers and having them perform parallel processing is called A. Handling this by replacing the server itself with a high-performance one, or by replacing the CPU, main memory, and other such components with ones of better performance is called B.
Same question on ITPEC: Apr 2026 Q4 +1 more
Which of the following represents the decimal number 155 in binary?
Same question on ITPEC: Apr 2025 Q15 +2 more
Among the changes A through D in a client/server system, which of the following is the list that contains all and only the appropriate changes for reducing the response time?
Among the descriptions A through C concerning data processing, which of the following lists all and only the effects obtained by introducing a DBMS?
Same question on ITPEC: Apr 2022 Q13
Which of the following is a chip that is used in image processing in devices such as PCs and smartphones, and is also used for large amount of calculation processing in AI?
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning the physical characteristics used in biometric authentication?
As the physical characteristics of the person in biometric authentication, those for which A is difficult and B is small are superior.
When risk treatment is classified into transfer, avoidance, reduction, and retention, which of the following is the category of the treatment below?
[Treatment]
As a countermeasure against information leakage from documents on desks in the workplace, a clear desk at the time of leaving the office was introduced.
Among the following implementation items in the establishment, implementation, maintenance and continual improvement of an ISMS, which of the following is performed first?
Same question on ITPEC: Apr 2022 Q34
Which of the following is an appropriate characteristic of LPWA?
Same question on ITPEC: Apr 2025 Q20 +2 more
Spreadsheet software is to be used to perform a calculation with the monthly sales data for each product shown in the worksheet below. When the expression “COUNTIF(B2:D2,>15000)” is entered in cell E2 and then copied to cell E3 and cell E4, which of the following is the value that is displayed in cell E4?
A single file was updated concurrently from two (2) PCs. When the processing for data n in the file was performed in the order of ① through ④, which of the following is the final value of data n? Here, the initial value of data n was 10.
In a relational database, which of the following is the result of executing an intersection operation on table A and table B?
Table A
Table B
Which of the following is a technology that is also used for supplying power to IoT devices, and that collects tiny amounts of energy such as light and heat (temperature differences) from the surrounding environment and converts it into electric power?
Same question on ITPEC: Apr 2025 Q32
Which of the following is an appropriate example of an IPv4 IP address that is assigned to a PC?
Which of the following is a mechanism for the remote, integrated management of mobile terminals such as smartphones that are lent to employees, and has functions such as security settings, and locking or initializing a terminal when it is lost?
Which of the following is an appropriate description concerning the technologies that are used in IP telephony?
VPNs that use TCP/IP as the communication protocol include an Internet VPN, which uses the Internet, and an IP-VPN, which uses a telecommunications carrier's own network. Which of the following cannot be done with an Internet VPN but can be done with an IP-VPN?
Same question on ITPEC: Nov 2021 Q13
Volatile memory loses its content when the power supply is lost. Among (i) through (iv) below, which of the following is the list of all volatile memory?
Same question on ITPEC: Oct 2025 Q9 +1 more
Which of the following is the explanation of a characteristic of hypertext?
Which of the following is the appropriate combination of terms to be inserted into blanks A and B in the description concerning websites?
The mechanism in which a website provider has data temporarily stored on a user’s PC via a Web browser is called A. By using this, it becomes possible to identify the user. The format in which metadata, such as the headings and summaries of a website, is described in a structured way is called B. By using this, users can be notified of update information of the website.
Same question on ITPEC: Nov 2021 Q44
Which of the following is a physical countermeasure for information security where depending on the importance of the information that is handled, an office or other such space is physically divided and separated into areas such as an open area, a security area, and a handover area?
Same question on ITPEC: Apr 2025 Q24
Which of the following is a technology that projects things such as video made with computer graphics on to buildings, objects, and other such three-dimensional things, and produces a variety of visual effects?
Same question on ITPEC: Apr 2022 Q44
Which of the following is not an appropriate security control concerning human resources as a security risk treatment in ISMS?
Same question on ITPEC: Oct 2025 Q37 +1 more
A document file that is stored on a file server is directly edited on a PC and then an attempt is made to overwrite the file, but the message “You do not have permission, so the file cannot be saved” is displayed. Which of the following is the appropriate combination of permissions that were set for the document file and the folder that it is stored in?
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning information security in ISMS?
Information security is the preservation of confidentiality, A and availability of information. In addition, it may also involve the preservation of other properties, such as B, accountability, non-repudiation, and reliability.
Among the descriptions concerning wireless LANs, which of the following lists all and only the appropriate ones?
Same question on ITPEC: Oct 2024 Q37
Which of the following is the activity in A (Act) phase in the PDCA model adopted in an organization that operates an ISMS?
Which of the following represents the property of hardware or other such things that makes it difficult for the internal data to be tampered with, decoded, extracted, or otherwise attacked illegitimately from outside?
Which of the following is an appropriate mechanism by which a terminal such as an IoT device or a smartphone obtains its own location information by using the GPS function installed in the terminal?
When Mr. A sends an e-mail addressed to Mr. X, he has decided to also send it to Mr. Y and Mr. Z for reference. However, he does not want Mr. X and Mr. Y to know that it was sent to Mr. Z. Which of the following is an appropriate combination of destinations to be specified in this case?
In a wireless LAN, which of the following is an appropriate countermeasure against eavesdropping by interception of radio waves between a PC and an access point?
Same question on ITPEC: Apr 2025 Q42
There is an IoT system that is composed of IoT devices and an IoT server that manages them. Which of the following is the appropriate combination of information security incidents (i) through (iii) in this system, and confidentiality, integrity, and availability that are compromised because of the incidents?
[Incident]
On a communication line where the transmission speed is 20 Mbps (bits/second) and the transmission efficiency is 80%, how many seconds does it take to transmit 1 Gbyte of data? Here, 1 Gbyte = 103 Mbytes.
Which of the following is an appropriate description concerning OSS (Open Source Software)?
Same question on ITPEC: Nov 2021 Q45
In public key cryptography, a key for encryption and a key for decryption are required. If four (4) people want to encrypt communication and send it to each other, a total of eight (8) keys are required. Of these, how many of these keys are not made public?
In building an IoT area network, the use of communication standards ① through ③ is being considered. When these communication standards are classified into wired and wireless, which of the following lists all and only those that are classified as wireless networks?
There is a system that consists of IoT devices and an IoT server, in which an IoT device sends the outside air temperature that it measured to the IoT server, and a motor installed in the IoT device opens and closes a window by following instructions from the IoT server. Which of the following is an appropriate role of the actuator in this system?
Same question on ITPEC: Oct 2025 Q38
When a digital signature is attached to an e-mail and the e-mail is sent, in comparison to the use of a digital certificate that is issued by a trusted certificate authority, which of the following is the risk on the receiver’s side that is caused by the use of a digital certificate created by the sender themselves?