Questions IPA Japan published in 令和3年度 ITパスポート試験 公開問題, translated into English, with IPA's answers. ITPEC is based on the same exams, so they are good practice for ITPEC too.
Which of the following is an appropriate reason for performing data modeling by using an E-R diagram?
Same question on ITPEC: Apr 2024 Q78
Which of the following is the appropriate description concerning an international organization for standardization?
Same question on ITPEC: Oct 2022 Q91
Which of the following is a term that refers to something that is modeled on the mechanism of a human brain and imitated with a computer program?
Same question on ITPEC: Apr 2025 Q89
Which of the following is the most appropriate term for referring to an automobile that has a function for connecting to the Internet, sends information captured by onboard sensors to a server and receives the driving-related information from the server for purposes such as support for driving?
Which of the following lists all and only the items that can be subject to protection under the Copyright Act?
When an innovative product or service spreads among consumers, the consumers can be classified into five groups, early adopters, early majority, innovators, laggards, and late majority, according to their interest in the innovation and the timing of their adoption. Among these, which of the following is the group that is positioned as the group with the second earliest timing of adoption, that evaluates the value of the innovation by itself, and that influences the majority of the remaining consumers?
Among the inappropriate acts A through C, which of the following lists all and only the acts that are regulated by the Unfair Competition Prevention Act?
Same question on ITPEC: Oct 2022 Q85
Which of the following is the appropriate explanation of a technology road map?
Which of the following is the most appropriate characteristic of RPA (Robotic Process Automation)?
Among descriptions A through C concerning worker dispatching, which of the following lists all and only the appropriate ones?
Same question on ITPEC: Oct 2025 Q98 +4 more
When the software lifecycle is divided into the planning process, the requirements definition process, the development process, and the operation process, which of the following is the process where the system functions that users and stakeholders require are clarified and consensus is built on the basis of a computerization plan?
The information systems department of Company A decided to build a sales support system to be used by the sales department, by utilizing a software package of Company B. When EUC (End User Computing) is promoted along with the building, which of the following is the most appropriate organization to perform operations such as extracting and processing business data and creating statistical materials?
Among cases A through C that occurred in services provided by a provider, which of the following lists all and only those that can be the subject of the provider’s responsibility for response under the Provider Liability Limitation Act?
Same question on ITPEC: Oct 2024 Q80
There are two (2) indicators for evaluating the achievement of strategic goals. These are leading indicators that evaluate the means for achieving the goals, and result indicators that evaluate the degree of goal achievement. If a strategic goal is “acquire new customers,” which of the following is an appropriate leading indicator?
Same question on ITPEC: Oct 2024 Q94
Which of the following is the most appropriate description concerning the analysis of big data?
Which of the following is an appropriate example of machine learning in an image recognition system?
Same question on ITPEC: Apr 2026 Q71
Which of the following is an appropriate example of ABC analysis?
Computerization using a business package is being considered. When the life cycle of an information system is divided into the computerization planning process, the requirements definition process, the development process, and the maintenance process, which of the following is the most appropriate task that is performed in the computerization planning process?
Product portfolio management is a technique used to allocate the management resources of a company optimally, and it classifies the strategic positioning of products and services into four (4) areas on the basis of their market growth rate and their share in the market. Which of the following is the area where the market share is low but the market is growing rapidly, and a large amount of investment is needed for future growth?
Same question on ITPEC: Oct 2022 Q96
Which of the following is the most appropriate description of teleworking?
Same question on ITPEC: Apr 2026 Q70 +2 more
Which of the following is the most appropriate terminology for referring to a method that uses AI, IoT, and other such IT for personnel-related work such as personnel evaluations and recruitment with aims including the improvement of a company’s personnel functions and the achievement of work style reforms?
How much is the ordinary profit in millions of yen that can be calculated from the following income statement data at the end of the current period?
Unit: Million yen
Same question on ITPEC: Oct 2023 Q72
Which of the following is an expression that calculates gross profit?
Among the inappropriate acts A through C related to the handling of information, which of the following lists all and only those that correspond to the prohibited acts defined in the Act on the Prohibition of Unauthorized Computer Access?
Same question on ITPEC: Oct 2025 Q85 +1 more
Which of the following is the most appropriate description of the API economy?
Among A through C, which of the following lists all and only those that are specified in the Basic Act on Cybersecurity?
In outsourcing the development of a computer system, a contract for work was concluded after the order amount was finalized. Which of the following is an appropriate combination of documents that are exchanged between the ordering party and the order-receiving party after the contract and before the payment? Here, it is assumed that there is no change in the content of the contract.
Same question on ITPEC: Apr 2025 Q84
Which of the following is the most appropriate example of business improvement through the implementation of SCM?
Same question on ITPEC: Apr 2025 Q90
In a manufacturing company, a production system uses electronic tags containing information such as the part number of a component. The tags are used as a production order from a post-process to a pre-process and a delivery note from a pre-process to a post-process. A system such as this is used in a just in time production system in a supply chain or in-house manufacturing. Which of the following is the appropriate name for a system such as this?
Same question on ITPEC: Apr 2023 Q57
There is a project with a development period of 10 months and a labor cost budget for development of 10 million yen. After the elapse of five (5) months, the actual labor cost is recorded as 6 million yen, and 40% of the deliverables is complete. If the development is continued till completion with the same productivity, how much will the excess of the budget for labor cost be?
Because the number of users of a system increased beyond the initial assumption and the response of the system deteriorated, it was decided to add one (1) server for reinforcement. The server whose operation test had been completed was incorporated into the system and put into operation. Which of the following is the appropriate process of IT service management that carries out this work?
Which of the following is the appropriate combination of terms or phrases to be inserted into blanks A and B in the following description concerning the procedure of a system audit?
A system audit must be performed on the basis of A, by the procedure of B.
Same question on ITPEC: Apr 2025 Q57 +1 more
The processes of project management include project cost management, project communications management, project resources management, project schedule management, and the like. In a system development project, which of the following is the most appropriate activity in project cost management when members are added for implementing a test?
In quality control in the test process of software that consists of multiple programs of the same level of difficulty, the number of bugs per unit number of steps of each program is graphed, and the programs that exceed the upper or lower limit line are to be detected as abnormal programs. Which of the following is the most appropriate diagram to be created?
Which of the following is an appropriate technique that aims to improve the productivity of software development by turning software into components and reusing it through the use of concepts such as classes and inheritance?
In a system development project, it was decided to additionally create a program in order to respond to a request from users. In order to create this program, it was decided to assign a programmer who had finished creating the preceding programs. Then, the schedule was changed so that all of the programs could be created by the planned start date of the integration test, and the new plan was made known within the project. Which of the following is the activity that manages change requests in this way?
In a project in which Company A newly develops a system, the development of the system is performed in the order of system requirements definition, design, programming, integration test, system test, and operational test. Company A has concluded a contract for work with Company B, an external vendor, with design, programming, and integration test as the scope of the outsourcing. Between which process and which process is it appropriate to perform the acceptance inspection that Company A carries out?
Same question on ITPEC: Apr 2026 Q61 +1 more
In IT service management, which of the following is the case where a person in charge of the service desk entrusts the resolution of a high-difficulty incident reported to the service desk to secondary support with specialized skills?
Among the things that are clarified in system requirements definition, which of the following is a requirement concerning performance?
In a system development project, which of the following is the project management activity that compares the list of screens and forms defined as deliverables with the number of screens and forms actually created, and confirms the differences that arose during development and their reasons?
Same question on ITPEC: Apr 2026 Q50
Which of the following is the most appropriate activity of improving the internal structure of an existing program without changing the external behavior of the software?
Which of the following is the most appropriate term to be inserted into blank A in the following description concerning IT governance?
A has the role of evaluating the current and future use of IT and ensuring that the use of IT conforms to the objectives of the business.
Same question on ITPEC: Oct 2025 Q56 +1 more
The PC on one’s desk and the printer in a shared space are started by a single person under the conditions shown in the figure below. Each operation/processing needs to be performed sequentially, but during automatic processing of one device, it is possible for the person to move or operate the other device in parallel. What is the minimum time required (in seconds) for the person to start the PC startup at his/her desk, then move, start and end the printer startup, return to his/her desk, and end the PC startup?
Flow of PC startup
Flow of printer startup
Same question on ITPEC: Oct 2022 Q62
Which of the following is the most appropriate example of implementation of agile development?
Same question on ITPEC: Oct 2022 Q65
Among the activities A through D concerning the information system of a company, which of the following is the list that contains all and only the appropriate activities that are performed from the viewpoint of the business continuity plan (BCP)?
Same question on ITPEC: Oct 2025 Q62 +1 more
Which of the following is the appropriate description concerning SLM in an IT service?
When a WBS is created, a supplementary document that describes the description of the work, the completion criteria, and other such information is created. Which of the following is an appropriate purpose of this document?
In a company that provides a paid e-mail service, when a system audit is performed on the efficiency of the cost-effectiveness of the development and capital investment concerning the e-mail service, which of the following is the most appropriate organization to which the system auditor belongs?
Which of the following is an attack that leads users to a fake site by overwriting the management information stored on a server that provides the service of matching domain names with IP addresses on the Internet?
Same question on ITPEC: Apr 2025 Q23
Which of the following is a space-saving server where computer components including the CPU, main memory, and storage are installed on a single circuit board and multiple circuit boards are mounted in racks?
Which of the following is an appropriate example of a physical security measure that prevents unauthorized entry into a server room by tailgating?
Same question on ITPEC: Apr 2025 Q33
Mr. A sent an e-mail to the three (3) people Mr. P, Mr. Q, and Mr. R. He entered Mr. P’s e-mail address in the To field, Mr. Q’s e-mail address in the CC field, and Mr. R’s e-mail address in the BCC field. Which of the following is the appropriate description concerning the three (3) recipients of the e-mail?
Which of the following is an appropriate example of two-step authentication in an information system?
Which of the following is the security standard concerning the protection of credit card information that was established for the purpose of handling credit card member data securely?
In an account transfer of a financial system, the consistency of the database is maintained by ensuring that, for the withdrawal processing from the transfer source account and the deposit processing to the transfer destination account, either both of the processes are executed or neither of them is executed. What is the term for handling such a series of processes for a database as a transaction and confirming the updated content of the database when the processing has been completed without inconsistency?
A Web server on the Internet is accessed from the browser of a PC or a smartphone via an access point of a wireless LAN. Which of the following is an appropriate description concerning SSL/TLS and WPA2 that are used for the encryption of communication in this case?
Which of the following is a high-speed, small-capacity memory circuit inside the CPU that is used for temporarily storing data related to arithmetic operations and control?
When the gradation of each color of RGB is represented by a 3-digit binary number respectively, how many colors can be represented by color mixing?
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning information security in ISMS?
Information security is the preservation of confidentiality, integrity and A of information. In addition, it may also involve the preservation of other properties, such as authenticity, accountability, non-repudiation, and B.
In a communication environment where there is a risk of eavesdropping in all communication sections, which of the following is the most appropriate method of sending a file whose content should not be known by anyone other than the recipient as an attachment to an e-mail?
Same question on ITPEC: Oct 2022 Q44
Which of the following is the appropriate combination of terms or phrases to be inserted into blanks A and B in the description below concerning authentication accuracy in biometric authentication?
In biometric authentication, the probability of incorrectly rejecting the relevant person is called the false rejection rate, and the probability of incorrectly accepting another person is called the false acceptance rate. The rate that an authentication device or algorithm cannot recognize biometric information is called the unsupported rate.
In the settings for authentication accuracy, setting the A lower increases convenience, and setting B lower increases security.
Same question on ITPEC: Apr 2026 Q28 +1 more
When conditions (i) through (iv) are all fulfilled, which of the following is the E-R diagram that indicates the relationship between publishing companies, authors, and books? Here, the notation for the E-R diagram is as below.
[Notation]
This indicates that A and B have a one-to-many relationship.
What is the name for a business operator that borrows the infrastructure of mobile communication services from another company and provides mobile communication services with smartphones and SIM cards under its own brand?
There is a system that consists of IoT devices and an IoT server, in which an IoT device sends the outside air temperature that it measured to the IoT server, and the IoT device opens and closes a window by following instructions from the IoT server. Which of the following is installed in the IoT device of this system and has the role of opening and closing the window?
Among the risk countermeasures concerning IoT devices, which of the following can increase tamper resistance in the event that an IoT device is stolen?
In the processing shown in Flowchart X, the value of variable i changed as 1 → 3 → 7 → 13, and in the processing shown in Flowchart Y, the value of variable i changed as 1 → 5 → 13 → 25. Which of the following is the appropriate combination of words to be inserted into blanks A and B in the figures?
(Note) The repetition specification of a loop limit shows variable name: initial value, increment, final value.
Among the functions A through D concerning information systems, which of the following lists all and only those that are provided in a DBMS?
There is an IoT system that consists of a group of IoT devices and an IoT server that manages them. When all the IoT devices encrypt communications by using the same key, and the IoT server decrypts the communications with a key that is different from the key that the IoT devices have, which of the following is this encryption technology?
Same question on ITPEC: Apr 2025 Q43
In the activities of an organization that runs an ISMS on the basis of the PDCA cycle, improvements and corrective measures are decided from the results of monitoring of the risk management activities and other such information. In which process of the PDCA cycle is this activity performed?
Which of the following is an appropriate description concerning OSS (Open Source Software)?
Which of the following is an appropriate description concerning “SECURITY ACTION,” a scheme that IPA established to accelerate the spread of information security measures in small and medium-sized enterprises?
There is a temperature and humidity management system that consists of IoT devices, IoT gateways, and an IoT server. Which of the following is an appropriate specification of low-power wireless communication that is used to connect an IoT device and an IoT gateway installed near it?
Which of the following is a method in which parallel processing is performed by multiple computers that are connected to a network, so that they can be used as a computer that virtually has high processing capability?
Which of the following is the term for combining multiple files into one (1) for the purpose of saving and storing many files?
Mail software has been newly installed on a PC. Which of the following corresponds to a protocol that needs to be set up at that time?
In the security of a wireless LAN, which of the following is a mechanism with which, when an access point receives a connection request from a terminal such as a PC, it restricts connection on the basis of information unique to the terminal that has requested the connection?
A system is to be built that sends the data obtained from many network cameras installed in a store to an IoT server via the Internet, and analyzes the behavior of customers. In this case, a system configuration was adopted in which an IoT gateway is placed in the store and executes video analysis processing to extract only the coordinate data of persons from the video, so that the data is sent after its volume has been reduced. Which of the following is the term for such a system configuration?
Which of the following is the term for a font in which the width of characters when they are displayed or printed differs for each character, in order to make words easy to read?
Same question on ITPEC: Oct 2022 Q45
In ISMS risk assessment, which of the following is performed first?
Same question on ITPEC: Oct 2024 Q1 +1 more
Which of the following is the combination of terms or phrases to be inserted into blanks A through C in the description below concerning a method for representing information?
Data that represents information by using a continuous, variable physical volume (length, angle, voltage, etc.) is called A data, and data that represents information by using discrete numerical values is called B data. A CD that is used for the distribution of music and songs is an optical disc medium that stores information as C data.
Among the tasks A through D below, which of the following is the list that contains all and only the tasks that are included in risk assessment in risk management?
Same question on ITPEC: Apr 2026 Q32 +1 more
Which of the following is used for communication in activities such as the gathering of data from IoT devices, and has wide range and power saving characteristics that enable wireless communication over a distance of tens of kilometers?
Which of the following is the most appropriate content that is displayed by an RSS reader used in blog services?
Which of the following is used in targeted attacks such as illegally obtaining important information from a specific PC, and operates the target PC of the attack remotely to make it send and receive files, execute commands, and do other such things?
Same question on ITPEC: Oct 2024 Q26
From a “Product” table and “Sales” table that are managed with a relational database, which of the following contains all and only the products where the total sales for each product in May is at least 20,000 yen?
Product
Sales
Which of the following is an appropriate description concerning an information security policy?
Which of the following realizes a distributed ledger that is used as a fundamental technology of crypto assets, in which multiple computers hold data with the same content and each computer verifies and ensures the validity of the data, so that it becomes difficult to tamper with the data without inconsistency?
Which of the following is an appropriate description concerning domain names used on the Internet?
Same question on ITPEC: Oct 2025 Q39
In risk management for information security, the categories that include risk transfer, risk avoidance, risk mitigation, and risk retention are sometimes used. Which of the following is the appropriate description concerning these?
Which of the following is the most appropriate reason why the concept of TCO has come to be regarded as important in the evaluation of the economic efficiency of a system?