LearnIPAReviewHistoryAI
Profile
AboutHow I passedFeedback
LearnIPA
Review
History
Profile
LearnIPAReviewHistoryAI
Profile
AboutHow I passedFeedback
IPA IP 2021

Questions IPA Japan published in 令和3年度 ITパスポート試験 公開問題, translated into English, with IPA's answers. ITPEC is based on the same exams, so they are good practice for ITPEC too.

Question 1

Which of the following is an appropriate reason for performing data modeling by using an E-R diagram?

Question 2

Same question on ITPEC: Apr 2024 Q78

Which of the following is the appropriate description concerning an international organization for standardization?

Question 3

Same question on ITPEC: Oct 2022 Q91

Which of the following is a term that refers to something that is modeled on the mechanism of a human brain and imitated with a computer program?

Question 4

Which of the following is the most appropriate explanation of enterprise search?

Question 5

Which of the following is the most appropriate explanation of cloud computing?

Question 6

Same question on ITPEC: Apr 2025 Q89

Which of the following is the most appropriate term for referring to an automobile that has a function for connecting to the Internet, sends information captured by onboard sensors to a server and receives the driving-related information from the server for purposes such as support for driving?

Question 7

Which of the following lists all and only the items that can be subject to protection under the Copyright Act?

AFree software published on the InternetBAn operation manual for a databaseCA programming languageDAn algorithm of a program
Question 8

When an innovative product or service spreads among consumers, the consumers can be classified into five groups, early adopters, early majority, innovators, laggards, and late majority, according to their interest in the innovation and the timing of their adoption. Among these, which of the following is the group that is positioned as the group with the second earliest timing of adoption, that evaluates the value of the innovation by itself, and that influences the majority of the remaining consumers?

Question 9

Among the inappropriate acts A through C, which of the following lists all and only the acts that are regulated by the Unfair Competition Prevention Act?

AThe act of using the personal information of applicants for a campaign for other purposes without the applicants’ permissionBThe act of illegally obtaining another person’s ID and password, and using them to access a computer via the InternetCThe act of using a domain name similar to another company’s product name or company name in order to obtain an unfair profit
Question 10

Same question on ITPEC: Oct 2022 Q85

Which of the following is the appropriate explanation of a technology road map?

Questions 11–20
Question 11

Which of the following is the most appropriate characteristic of RPA (Robotic Process Automation)?

Question 12

Among descriptions A through C concerning worker dispatching, which of the following lists all and only the appropriate ones?

ARegardless of the type of dispatch contract, the client company selects the dispatched worker.BAfter the period of employment with the dispatching company ends, the client company may employ a person who was a dispatched worker.CThe client company pays the wages of the dispatched worker.
Question 13

Which of the following is the most appropriate example of FinTech?

Question 14

Same question on ITPEC: Oct 2025 Q98 +4 more

When the software lifecycle is divided into the planning process, the requirements definition process, the development process, and the operation process, which of the following is the process where the system functions that users and stakeholders require are clarified and consensus is built on the basis of a computerization plan?

Question 15

The information systems department of Company A decided to build a sales support system to be used by the sales department, by utilizing a software package of Company B. When EUC (End User Computing) is promoted along with the building, which of the following is the most appropriate organization to perform operations such as extracting and processing business data and creating statistical materials?

Question 16

Which of the following is an appropriate description of merchandising?

Question 17

Among cases A through C that occurred in services provided by a provider, which of the following lists all and only those that can be the subject of the provider’s responsibility for response under the Provider Liability Limitation Act?

APersonal information such as a name was posted on an electronic bulletin board, and the rights of an individual were infringed.BInfection with malware was caused by an attached file of a received e-mail.CA user ID and a password were used without permission, and a shopping site was accessed.
Question 18

Same question on ITPEC: Oct 2024 Q80

There are two (2) indicators for evaluating the achievement of strategic goals. These are leading indicators that evaluate the means for achieving the goals, and result indicators that evaluate the degree of goal achievement. If a strategic goal is “acquire new customers,” which of the following is an appropriate leading indicator?

Question 19

Same question on ITPEC: Oct 2024 Q94

Which of the following is the most appropriate description concerning the analysis of big data?

Question 20

Which of the following is an appropriate example of machine learning in an image recognition system?

Questions 21–30
Question 21

Same question on ITPEC: Apr 2026 Q71

Which of the following is an appropriate example of ABC analysis?

Question 22

Computerization using a business package is being considered. When the life cycle of an information system is divided into the computerization planning process, the requirements definition process, the development process, and the maintenance process, which of the following is the most appropriate task that is performed in the computerization planning process?

Question 23

Product portfolio management is a technique used to allocate the management resources of a company optimally, and it classifies the strategic positioning of products and services into four (4) areas on the basis of their market growth rate and their share in the market. Which of the following is the area where the market share is low but the market is growing rapidly, and a large amount of investment is needed for future growth?

Question 24

Same question on ITPEC: Oct 2022 Q96

Which of the following is the most appropriate description of teleworking?

Question 25

Which of the following is the most appropriate description concerning crypto assets?

Question 26

Same question on ITPEC: Apr 2026 Q70 +2 more

Which of the following is the most appropriate terminology for referring to a method that uses AI, IoT, and other such IT for personnel-related work such as personnel evaluations and recruitment with aims including the improvement of a company’s personnel functions and the achievement of work style reforms?

Question 27

Which of the following is an appropriate example of BYOD?

Question 28

How much is the ordinary profit in millions of yen that can be calculated from the following income statement data at the end of the current period?

Unit: Million yen

Net sales3,000
Cost of sales1,500
Selling, general, and administrative expenses500
Non-operating expenses15
Extraordinary loss300
Corporate tax300
Question 29

Same question on ITPEC: Oct 2023 Q72

Which of the following is an expression that calculates gross profit?

Question 30

Among the inappropriate acts A through C related to the handling of information, which of the following lists all and only those that correspond to the prohibited acts defined in the Act on the Prohibition of Unauthorized Computer Access?

AAnother person’s user ID and password written in a notebook that was found in the office were used without permission to log in to the company’s server via the network, and the personnel evaluation information stored there was viewed.BWhen a colleague left the desk, personnel evaluation information that was displayed on the colleague’s PC screen, and that one has no right to access, was viewed.CA USB memory containing personnel evaluation information that was kept in the department’s storage cabinet was taken out without the permission of the superior, and the personnel evaluation information was viewed on one’s own PC.
Questions 31–40
Question 31

Same question on ITPEC: Oct 2025 Q85 +1 more

Which of the following is the most appropriate description of the API economy?

Question 32

Among A through C, which of the following lists all and only those that are specified in the Basic Act on Cybersecurity?

AThe responsibilities that the national government and local governments should fulfill concerning cybersecurityBWhat citizens should endeavor to do concerning cybersecurityCThe basic principles for the promotion of measures concerning cybersecurity
Question 33

In outsourcing the development of a computer system, a contract for work was concluded after the order amount was finalized. Which of the following is an appropriate combination of documents that are exchanged between the ordering party and the order-receiving party after the contract and before the payment? Here, it is assumed that there is no change in the content of the contract.

Question 34

Same question on ITPEC: Apr 2025 Q84

Which of the following is the most appropriate example of business improvement through the implementation of SCM?

Question 35

Same question on ITPEC: Apr 2025 Q90

In a manufacturing company, a production system uses electronic tags containing information such as the part number of a component. The tags are used as a production order from a post-process to a pre-process and a delivery note from a pre-process to a post-process. A system such as this is used in a just in time production system in a supply chain or in-house manufacturing. Which of the following is the appropriate name for a system such as this?

Question 36

Same question on ITPEC: Apr 2023 Q57

There is a project with a development period of 10 months and a labor cost budget for development of 10 million yen. After the elapse of five (5) months, the actual labor cost is recorded as 6 million yen, and 40% of the deliverables is complete. If the development is continued till completion with the same productivity, how much will the excess of the budget for labor cost be?

Question 37

Because the number of users of a system increased beyond the initial assumption and the response of the system deteriorated, it was decided to add one (1) server for reinforcement. The server whose operation test had been completed was incorporated into the system and put into operation. Which of the following is the appropriate process of IT service management that carries out this work?

Question 38

Which of the following is the appropriate combination of terms or phrases to be inserted into blanks A and B in the following description concerning the procedure of a system audit?

A system audit must be performed on the basis of A, by the procedure of B.

OptionAB
Question 39

Same question on ITPEC: Apr 2025 Q57 +1 more

The processes of project management include project cost management, project communications management, project resources management, project schedule management, and the like. In a system development project, which of the following is the most appropriate activity in project cost management when members are added for implementing a test?

Question 40

In quality control in the test process of software that consists of multiple programs of the same level of difficulty, the number of bugs per unit number of steps of each program is graphed, and the programs that exceed the upper or lower limit line are to be detected as abnormal programs. Which of the following is the most appropriate diagram to be created?

Questions 41–50
Question 41

Which of the following is an appropriate technique that aims to improve the productivity of software development by turning software into components and reusing it through the use of concepts such as classes and inheritance?

Question 42

In a system development project, it was decided to additionally create a program in order to respond to a request from users. In order to create this program, it was decided to assign a programmer who had finished creating the preceding programs. Then, the schedule was changed so that all of the programs could be created by the planned start date of the integration test, and the new plan was made known within the project. Which of the following is the activity that manages change requests in this way?

Question 43

In a project in which Company A newly develops a system, the development of the system is performed in the order of system requirements definition, design, programming, integration test, system test, and operational test. Company A has concluded a contract for work with Company B, an external vendor, with design, programming, and integration test as the scope of the outsourcing. Between which process and which process is it appropriate to perform the acceptance inspection that Company A carries out?

Question 44

Same question on ITPEC: Apr 2026 Q61 +1 more

In IT service management, which of the following is the case where a person in charge of the service desk entrusts the resolution of a high-difficulty incident reported to the service desk to secondary support with specialized skills?

Question 45

Which of the following is an appropriate description concerning ITIL?

Question 46

Among the things that are clarified in system requirements definition, which of the following is a requirement concerning performance?

Question 47

In a system development project, which of the following is the project management activity that compares the list of screens and forms defined as deliverables with the number of screens and forms actually created, and confirms the differences that arose during development and their reasons?

Question 48

Same question on ITPEC: Apr 2026 Q50

Which of the following is the most appropriate activity of improving the internal structure of an existing program without changing the external behavior of the software?

Question 49

Which of the following is the most appropriate term to be inserted into blank A in the following description concerning IT governance?

A has the role of evaluating the current and future use of IT and ensuring that the use of IT conforms to the objectives of the business.

Question 50

Same question on ITPEC: Oct 2025 Q56 +1 more

The PC on one’s desk and the printer in a shared space are started by a single person under the conditions shown in the figure below. Each operation/processing needs to be performed sequentially, but during automatic processing of one device, it is possible for the person to move or operate the other device in parallel. What is the minimum time required (in seconds) for the person to start the PC startup at his/her desk, then move, start and end the printer startup, return to his/her desk, and end the PC startup?

[Conditions]
PC on one’s deskPrinter in a shared spaceMovement: 60seconds one way

Flow of PC startup

Operation/​processingTimerequiredProcessingtype
(Start of startup)
A: Turn on the power3 secondsManualoperation
B: Login screen startup150 secondsAutomaticprocessing
C: Login operation10 secondsManualoperation
D: Application startup     after login60 secondsAutomaticprocessing
(End of startup)

Flow of printer startup

Operation/​processingTimerequiredProcessingtype
(Start of startup)
E: Turn on the power3 secondsManualoperation
F: Startup60 secondsAutomaticprocessing
(End of startup)
Questions 51–60
Question 51

Same question on ITPEC: Oct 2022 Q62

Which of the following is the most appropriate example of implementation of agile development?

Question 52

Same question on ITPEC: Oct 2022 Q65

Among the activities A through D concerning the information system of a company, which of the following is the list that contains all and only the appropriate activities that are performed from the viewpoint of the business continuity plan (BCP)?

A:Periodically taking a backup of important dataB:Securing a generator and fuel for emergenciesC:Securing multiple communication networksD:Implementing training for recovery procedures
Question 53

Same question on ITPEC: Oct 2025 Q62 +1 more

Which of the following is the appropriate description concerning SLM in an IT service?

Question 54

When a WBS is created, a supplementary document that describes the description of the work, the completion criteria, and other such information is created. Which of the following is an appropriate purpose of this document?

Question 55

In a company that provides a paid e-mail service, when a system audit is performed on the efficiency of the cost-effectiveness of the development and capital investment concerning the e-mail service, which of the following is the most appropriate organization to which the system auditor belongs?

Question 56

Which of the following is an attack that leads users to a fake site by overwriting the management information stored on a server that provides the service of matching domain names with IP addresses on the Internet?

Question 57

Same question on ITPEC: Apr 2025 Q23

Which of the following is a space-saving server where computer components including the CPU, main memory, and storage are installed on a single circuit board and multiple circuit boards are mounted in racks?

Question 58

Which of the following is an appropriate example of a physical security measure that prevents unauthorized entry into a server room by tailgating?

Question 59

Same question on ITPEC: Apr 2025 Q33

Mr. A sent an e-mail to the three (3) people Mr. P, Mr. Q, and Mr. R. He entered Mr. P’s e-mail address in the To field, Mr. Q’s e-mail address in the CC field, and Mr. R’s e-mail address in the BCC field. Which of the following is the appropriate description concerning the three (3) recipients of the e-mail?

Question 60

Which of the following is an appropriate example of two-step authentication in an information system?

Questions 61–70
Question 61

Which of the following is the security standard concerning the protection of credit card information that was established for the purpose of handling credit card member data securely?

Question 62

In an account transfer of a financial system, the consistency of the database is maintained by ensuring that, for the withdrawal processing from the transfer source account and the deposit processing to the transfer destination account, either both of the processes are executed or neither of them is executed. What is the term for handling such a series of processes for a database as a transaction and confirming the updated content of the database when the processing has been completed without inconsistency?

Question 63

A Web server on the Internet is accessed from the browser of a PC or a smartphone via an access point of a wireless LAN. Which of the following is an appropriate description concerning SSL/TLS and WPA2 that are used for the encryption of communication in this case?

Question 64

Which of the following is a high-speed, small-capacity memory circuit inside the CPU that is used for temporarily storing data related to arithmetic operations and control?

Question 65

Which of the following is an appropriate example of shadow IT?

Question 66

When the gradation of each color of RGB is represented by a 3-digit binary number respectively, how many colors can be represented by color mixing?

Question 67

Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning information security in ISMS?

Information security is the preservation of confidentiality, integrity and A of information. In addition, it may also involve the preservation of other properties, such as authenticity, accountability, non-repudiation, and B.

OptionAB
Question 68

In a communication environment where there is a risk of eavesdropping in all communication sections, which of the following is the most appropriate method of sending a file whose content should not be known by anyone other than the recipient as an attachment to an e-mail?

Question 69

Same question on ITPEC: Oct 2022 Q44

Which of the following is the appropriate combination of terms or phrases to be inserted into blanks A and B in the description below concerning authentication accuracy in biometric authentication?

In biometric authentication, the probability of incorrectly rejecting the relevant person is called the false rejection rate, and the probability of incorrectly accepting another person is called the false acceptance rate. The rate that an authentication device or algorithm cannot recognize biometric information is called the unsupported rate.

In the settings for authentication accuracy, setting the A lower increases convenience, and setting B lower increases security.

OptionAB
Question 70

Same question on ITPEC: Apr 2026 Q28 +1 more

When conditions (i) through (iv) are all fulfilled, which of the following is the E-R diagram that indicates the relationship between publishing companies, authors, and books? Here, the notation for the E-R diagram is as below.

[Notation]

AB

This indicates that A and B have a one-to-many relationship.

[Conditions](i)A publishing company has contracts with multiple authors.(ii)An author has a contract with only one (1) publishing company.(iii)An author writes multiple books.(iv)One (1) book is written by one (1) author.
Questions 71–80
Question 71

What is the name for a business operator that borrows the infrastructure of mobile communication services from another company and provides mobile communication services with smartphones and SIM cards under its own brand?

Question 72

There is a system that consists of IoT devices and an IoT server, in which an IoT device sends the outside air temperature that it measured to the IoT server, and the IoT device opens and closes a window by following instructions from the IoT server. Which of the following is installed in the IoT device of this system and has the role of opening and closing the window?

Question 73

Among the risk countermeasures concerning IoT devices, which of the following can increase tamper resistance in the event that an IoT device is stolen?

Question 74

In the processing shown in Flowchart X, the value of variable i changed as 1 → 3 → 7 → 13, and in the processing shown in Flowchart Y, the value of variable i changed as 1 → 5 → 13 → 25. Which of the following is the appropriate combination of words to be inserted into blanks A and B in the figures?

[Flowchart X]
StartStore 1 in iConversionk: 1, 1, 3 (Note)Ais calculated, and theresult is stored in iConversionEnd
[Flowchart Y]
StartStore 1 in iConversionB(Note)Ais calculated, and theresult is stored in iConversionEnd

(Note) The repetition specification of a loop limit shows variable name: initial value, increment, final value.

OptionAB
Question 75

Among the functions A through D concerning information systems, which of the following lists all and only those that are provided in a DBMS?

AAccess rights managementBFailure recoveryCConcurrency controlDFirewall
Question 76

There is an IoT system that consists of a group of IoT devices and an IoT server that manages them. When all the IoT devices encrypt communications by using the same key, and the IoT server decrypts the communications with a key that is different from the key that the IoT devices have, which of the following is this encryption technology?

Question 77

Same question on ITPEC: Apr 2025 Q43

In the activities of an organization that runs an ISMS on the basis of the PDCA cycle, improvements and corrective measures are decided from the results of monitoring of the risk management activities and other such information. In which process of the PDCA cycle is this activity performed?

Question 78

Which of the following is an appropriate description concerning OSS (Open Source Software)?

Question 79

Which of the following is an appropriate description concerning “SECURITY ACTION,” a scheme that IPA established to accelerate the spread of information security measures in small and medium-sized enterprises?

Question 80

There is a temperature and humidity management system that consists of IoT devices, IoT gateways, and an IoT server. Which of the following is an appropriate specification of low-power wireless communication that is used to connect an IoT device and an IoT gateway installed near it?

Questions 81–90
Question 81

Which of the following is an appropriate description concerning J-CRAT?

Question 82

Which of the following is a method in which parallel processing is performed by multiple computers that are connected to a network, so that they can be used as a computer that virtually has high processing capability?

Question 83

Which of the following is the term for combining multiple files into one (1) for the purpose of saving and storing many files?

Question 84

Mail software has been newly installed on a PC. Which of the following corresponds to a protocol that needs to be set up at that time?

Question 85

In the security of a wireless LAN, which of the following is a mechanism with which, when an access point receives a connection request from a terminal such as a PC, it restricts connection on the basis of information unique to the terminal that has requested the connection?

Question 86

A system is to be built that sends the data obtained from many network cameras installed in a store to an IoT server via the Internet, and analyzes the behavior of customers. In this case, a system configuration was adopted in which an IoT gateway is placed in the store and executes video analysis processing to extract only the coordinate data of persons from the video, so that the data is sent after its volume has been reduced. Which of the following is the term for such a system configuration?

Question 87

Which of the following is the term for a font in which the width of characters when they are displayed or printed differs for each character, in order to make words easy to read?

Question 88

Same question on ITPEC: Oct 2022 Q45

In ISMS risk assessment, which of the following is performed first?

Question 89

Same question on ITPEC: Oct 2024 Q1 +1 more

Which of the following is the combination of terms or phrases to be inserted into blanks A through C in the description below concerning a method for representing information?

Data that represents information by using a continuous, variable physical volume (length, angle, voltage, etc.) is called A data, and data that represents information by using discrete numerical values is called B data. A CD that is used for the distribution of music and songs is an optical disc medium that stores information as C data.

OptionABC
Question 90

Which of the following is an appropriate explanation concerning the clock of a CPU?

Questions 91–100
Question 91

Among the tasks A through D below, which of the following is the list that contains all and only the tasks that are included in risk assessment in risk management?

ADetermining the risk level by using threats, vulnerabilities, and other such factors.BIdentifying the factors that become risks.CDeciding how to respond to risks.DDeciding the priority order for responding to risks.
Question 92

Same question on ITPEC: Apr 2026 Q32 +1 more

Which of the following is used for communication in activities such as the gathering of data from IoT devices, and has wide range and power saving characteristics that enable wireless communication over a distance of tens of kilometers?

Question 93

Which of the following is the most appropriate content that is displayed by an RSS reader used in blog services?

Question 94

Which of the following is used in targeted attacks such as illegally obtaining important information from a specific PC, and operates the target PC of the attack remotely to make it send and receive files, execute commands, and do other such things?

Question 95

Same question on ITPEC: Oct 2024 Q26

From a “Product” table and “Sales” table that are managed with a relational database, which of the following contains all and only the products where the total sales for each product in May is at least 20,000 yen?

Product

ProductCodeProductNamePrice (yen)
0001Product A2,000
0002Product B4,000
0003Product C7,000
0004Product D10,000

Sales

SalesNumberProductCodeQuantitySalesDateDeliveryDate
Z00001000434/305/2
Z00002000134/305/3
Z00005000335/155/17
Z00006000155/155/18
Z00003000235/55/18
Z00004000145/105/20
Z00007000235/306/2
Z00008000316/86/10
Question 96

Which of the following is an appropriate description concerning an information security policy?

Question 97

Which of the following realizes a distributed ledger that is used as a fundamental technology of crypto assets, in which multiple computers hold data with the same content and each computer verifies and ensures the validity of the data, so that it becomes difficult to tamper with the data without inconsistency?

Question 98

Which of the following is an appropriate description concerning domain names used on the Internet?

Question 99

Same question on ITPEC: Oct 2025 Q39

In risk management for information security, the categories that include risk transfer, risk avoidance, risk mitigation, and risk retention are sometimes used. Which of the following is the appropriate description concerning these?

Question 100

Which of the following is the most appropriate reason why the concept of TCO has come to be regarded as important in the evaluation of the economic efficiency of a system?

LearnIPA
Review
History
Profile