LearnIPAReviewHistoryAI
Profile
AboutHow I passedFeedback
LearnIPA
Review
History
Profile
LearnIPAReviewHistoryAI
Profile
AboutHow I passedFeedback
IPA IP 2022

Questions IPA Japan published in 令和4年度 ITパスポート試験 公開問題, translated into English, with IPA's answers. ITPEC is based on the same exams, so they are good practice for ITPEC too.

Question 1

Among the descriptions A through C concerning copyrights and patent rights, which of the following lists all and only the appropriate descriptions?

AWhen two similar things happen to be created by chance, the patent rights that come with the inventions are granted to both, but the copyright is granted to only one of the authors.BIn the case of software, both the patent right and the copyright are granted for the source program list.CAcquiring a patent right requires an application and registration, but a copyright requires no application or registration.
Question 2

Same question on ITPEC: Oct 2024 Q79

Which of the following is the most appropriate marketing strategy for narrowing down the customer base to focus on by classifying customers on the basis of age, gender, family structure, and the like, and analyzing the purchasing behaviors of each group?

Question 3

Same question on ITPEC: Oct 2023 Q91

Which of the following is software for performing basic control of hardware mounted on a gaming console, household appliances, etc.?

Question 4

Which of the following is the most appropriate mechanism that increases the efficiency and effectiveness of learning by accumulating and analyzing the learning history of individuals through the use of IT, and providing the optimal content according to each learner’s learning progress and level of understanding?

Question 5

Same question on ITPEC: Oct 2024 Q73 +1 more

Which of the following is the most appropriate description of NDA?

Question 6

Among the descriptions A through C concerning the patenting of a technology developed in-house, which of the following lists all and only the appropriate effects that can be expected to be obtained directly?

AAdvantageous conditions can be set when forming an alliance with other companies related to the technology.BPart of the development cost of the technology can be recovered through licensing.COther companies can be prevented from entering into products or businesses that use the technology.
Question 7

For the purpose of optimizing business operations and information systems, the current state is first grasped in four layers, for example, business, data, application, and technology, and the ideal image that serves as the goal is set. Next, the gap between the current state and the ideal is clarified, and the improvement activities toward the ideal image that serves as the goal are defined as a migration plan. Which of the following is the most appropriate technique for such optimization?

Question 8

Same question on ITPEC: Apr 2023 Q99

For the reconstruction of a business system, an RFI is scheduled to request multiple vendors to submit an implementation image of the new system. In that regard, which of the following is appropriate information that the vendors are requested to submit at the same time?

Question 9

Among the inappropriate acts A through C, which of the following lists all and only the acts that are regulated by the Act on the Prohibition of Unauthorized Computer Access?

AProviding another person’s e-mail user ID and password to a third party without a justifiable reason and without the owner’s permission.BUsing another person’s e-mail user ID and password without the owner’s permission to read that person’s e-mail on the mail server via a network.CCreating malware that disables e-mail user IDs and passwords so that the mail server cannot be accessed.
Question 10

Same question on ITPEC: Apr 2024 Q85

Which of the following is an appropriate description of a “patent portfolio” that is important for establishing the patent strategy?

Questions 11–20
Question 11

When all the transactions up to the close of business on May 31 with a business partner whose credit limit is set at 30 million yen are as shown in the table, what is the remaining credit available to the business partner at that point, in 10,000 yen? Here, orders received are also included in the credit, and collection by a promissory note before its maturity date is not regarded as collection.

Transaction / DateTransaction detailsTransaction amount (10,000 yen)
Transaction ①
4/2Sales recorded400
5/31Cash collected400
Transaction ②
4/10Sales recorded300
5/10Collected by promissory note300
RemarksMaturity date: 6/10
Transaction ③
5/15Sales recorded600
Transaction ④
5/20Order received200
Question 12

Same question on ITPEC: Apr 2025 Q91 +1 more

Crowdfunding can be classified into loan-based, donation-based, purchase-based, or investment-based types, depending on the form of funding and the way the compensation is paid. In order to start a new business, Company A has decided to raise funds through crowdfunding and pay a part of the profits to the funders as dividends. Which of the following is the most appropriate type of crowdfunding used by Company A?

Question 13

Which of the following is an appropriate document for which disclosure can be requested on the basis of the Act on Access to Information Held by Administrative Organs?

Question 14

Which of the following is the most appropriate description concerning a shrink-wrap agreement, which is one of the license agreements for commercially available software packages and the like?

Question 15

When a business process is modeled by using the UML activity diagram shown as an example, which of the following can be represented?

Task group ATask group BXYTask aTask b[NO][YES]Task c
Question 16

Which of the following is an appropriate description concerning the My Number?

Question 17

Which of the following is an appropriate example of BYOD?

Question 18

Which of the following is the most appropriate description concerning the initiatives that have become prominent since Industry 4.0?

Question 19

Company A, a manufacturing and sales company, set strategic themes by using the concept of the balanced scorecard. Which of the following is the most appropriate strategic theme based on the business process (internal business process) viewpoint?

Question 20

To represent certain data, the use of either one (1) JAN code or one (1) QR code is being considered. When the one with the larger maximum amount of data that can be represented is adopted, which of the following is an appropriate result of the consideration?

Questions 21–30
Question 21

The “Social Principles of Human-Centric AI” established by the government state that a society that respects three (3) values as its philosophy and pursues their realization should be built. Which of the following lists all and only the visions of society whose realization should be pursued?

AA sustainable societyBA society in which people with diverse backgrounds can pursue diverse forms of happinessCA society in which humans are freed from all kinds of laborDA society in which human dignity is respected
Question 22

Same question on ITPEC: Apr 2026 Q84 +1 more

Which of the following is the purpose of constructing an SCM system?

Question 23

Which of the following is the most appropriate description concerning opt-out?

Question 24

Which of the following is the most appropriate description of an example of supervised learning?

Question 25

Among A through D, which of the following lists all and only the diagrams and charts that are used for representing business processes when business processes are improved?

ADFDBActivity diagramCPareto chartDRadar chart
Question 26

Same question on ITPEC: Oct 2025 Q84

Which of the following is the appropriate means of complementing the technologies and know-how of one’s company with those of other companies in a short period of time?

Question 27

Which of the following corresponds to “special care-required personal information,” which is defined in the Act on the Protection of Personal Information as requiring particular care in its handling?

Question 28

When the assets, liabilities, and net assets of Company A in a certain period are as shown below, what is the current ratio in percentage, which is one of the indicators of management safety and shows the short-term ability to pay?

Unit: Million yenAssetsCurrent assets3,000Fixed assets4,500LiabilitiesCurrent liabilities1,500Fixed liabilities4,000Net assetsShareholders’ equity2,000
Question 29

Which of the following is the most appropriate description concerning countermeasures against money laundering?

Question 30

Same question on ITPEC: Oct 2025 Q71 +2 more

Which of the following is the expression that calculates operating profit?

Questions 31–40
Question 31

Same question on ITPEC: Apr 2025 Q71

In order to improve the customer service level of a call center, the complaints received from customers concerning the response of the call center are classified and tabulated. Which of the following is a chart suitable for displaying the number of complaints in a bar chart and the cumulative percentage in a line chart, in descending order of complaints, for determining the priority of improvement?

Question 32

Same question on ITPEC: Oct 2025 Q92 +1 more

Which of the following is the most appropriate diagram representing the flow of business operations after concurrent engineering is applied? Here, the arrows in the diagram show the flow of business operations, and each activity name is displayed on top.

Question 33

Which of the following is the most appropriate term that represents the state or degree to which various people can operate, obtain, and use IT equipment, software, information, etc. in the same way, regardless of differences in users’ physical characteristics and abilities?

Question 34

Same question on ITPEC: Oct 2025 Q100 +1 more

In an online service, a website with a newly created design and a website with a conventional design were run in parallel experimentally to compare them and find out the one that makes its users more likely to apply for paid services. Which of the following is the most appropriate technique used at this time?

Question 35

A call center has been studying business reform that utilizes AI, and has narrowed down the system to be introduced. However, there are many unclear points, such as whether the expected effects can be obtained, so it decided to conduct a trial and verify feasibility. What is such verification called?

Question 36

Same question on ITPEC: Apr 2026 Q56 +1 more

Which of the following is the appropriate description concerning WBS created in a project?

Question 37

Same question on ITPEC: Oct 2023 Q65

Several functions are implemented for internal control by the system. Which of the following is the appropriate function that the process below implements?

  The login screen is displayed. A user enters the user ID and the password. If the combination of the user ID and the password matches the already-registered combination, the screen transits to the business menu screen. If not, the screen does not transit, and an error message is displayed.

Question 38

Which of the following is the most appropriate description of XP (Extreme Programming)?

Question 39

Same question on ITPEC: Apr 2024 Q62

In order to improve the value of an IT service to be provided, it is necessary to consider the balance of three (3) items, namely the offer price of the service, the functions of the service, that is, what the service can offer, and a guarantee of the service with maintained availability. Which of the following is a description that corresponds to guarantee of the service of an instant messenger?

Question 40

Which of the following is the most appropriate description concerning IT governance?

Questions 41–50
Question 41

Same question on ITPEC: Apr 2026 Q60

A satellite office is constructed in a company that promotes telework. Measures to prevent overcurrent caused by lightning strikes were examined for network devices and PCs used in the satellite office. Which of the following is the most appropriate effective measure?

Question 42

Same question on ITPEC: Apr 2024 Q50

Which of the following is the most appropriate term expressing initiatives to improve the services where the development side and the operations side of the system cooperate to proactively automate operations of the system and transition to the new production system, and release new functions?

Question 43

In the arrow diagram in the figure, activity B was completed 2 days late. Therefore, in order to complete all the activities within the scheduled period, it was decided to add personnel to activity D. When 20 personnel are initially assigned to activity D, what is the minimum number of personnel that need to be added to activity D? Here, the work efficiency of the personnel is uniform.

A5C5B10D10E4F4
LegendActivity nameRequired days
Question 44

Which of the following is an appropriate purpose of incident management in IT service management?

Question 45

Same question on ITPEC: Oct 2025 Q49 +1 more

Which of the following is the appropriate description concerning the black box test?

Question 46

Same question on ITPEC: Oct 2024 Q61

Among the descriptions A through D below, which of the following lists all and only the activities of facility management?

A:Management of entry and exit to and from the building in which computers are installedB:Installation and update management of anti-malware software on the company’s PCsC:License management of the software constituting the information systemD:Installation of an uninterruptible power supply (UPS) to prevent loss of data during a power cut
Question 47

Which of the following is an appropriate description concerning software maintenance?

Question 48

In the quality management of a system development project, which of the following is an appropriate description of the method for pursuing the root cause by associating quality problems with their causes?

Question 49

Same question on ITPEC: Apr 2026 Q59 +1 more

In order to automatically respond to queries from users of an IT service, it was decided to install a chatbot. Which of the following is the most appropriate management process where such automation by a chatbot is effective?

Question 50

Software of 120 k steps was developed. When the actual productivity in each process of the development is as shown in the table, how many person-months is the effort for the entire development? Here, productivity is the number of k steps per person-month.

Unit: k steps/person-month

ProcessProductivity
Design6.0
Production4.0
Questions 51–60
Question 51

In the following description concerning SLA in IT service management, which of the following is the appropriate combination of words to be inserted into blanks A and B?

An SLA is a written agreement exchanged between A and B. The target values of the service that A expects are quantified, agreed upon, and then specified in the SLA, and B measures and evaluates them and then improves the quality of the service.

OptionAB
Question 52

Same question on ITPEC: Apr 2026 Q57 +1 more

Company A orders the development of a system to Company B and starts a system development project. Among (i) through (iv) below who are concerned with the project, which of the following lists all and only the stakeholders of the project?

(i)Company A’s management executives(ii)Company A’s user department(iii)Company B’s project manager(iv)Company B’s business partner that provides technical support
Question 53

Among A through D, which of the following lists all and only the appropriate descriptions concerning the investigation means that a system auditor uses in a preliminary investigation or a main investigation in order to obtain reasonable evaluations and conclusions?

AUse of EA (Enterprise Architecture)BUse of audit techniques that use a computerCPerusal of materials and documentsDInterviews
Question 54

A service desk that handles telephone inquiries from customers introduced an operator support system such as the following. Among the effects A through C that can be expected from introducing this system, which of the following lists all and only the appropriate ones?

The system recognizes the conversation between the customer and the operator, instantly matches it against a knowledge database, and displays the items that should be confirmed next and the candidates for the optimal answer on the operator’s display.

AEven an operator with little experience can respond to the customer on the basis of the optimal answer candidates, so variation in the responses by operators can be reduced.BThe system automatically grasps what the customer wants and answers it, so telephone inquiries can be handled 24 hours a day.CThe operator no longer needs to search for the information needed for the response, so the time to respond to each customer can be shortened.
Question 55

Which of the following is an appropriate description of PCI DSS in information security?

Question 56

Which of the following is an appropriate example of a measure for reducing the damage, assuming a case where damage has been suffered from ransomware?

Question 57

Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning reasoning?

A is a method of obtaining a rule that is common to individual cases on the basis of those cases, and the rule obtained B.

OptionAB
Question 58

In the planning, operation, performance evaluation, and improvement of an ISMS, which of the following is implemented in performance evaluation?

Question 59

Same question on ITPEC: Oct 2025 Q3 +1 more

Which of the following is the combination of the mean and median of the data?

[Data]

10, 20, 20, 20, 40, 50, 100, 440, 2000

OptionMeanMedian
Question 60

Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning the keys used in public key cryptography?

When Company A and Company B, each of which has a public key and a private key, send and receive information, it was decided that the information would be encrypted before it is sent, so that its content would not be known even if the communication were intercepted by others.
When information is sent from Company A to Company B, Company A sends Company B the information encrypted by using A. Company B decrypts the information received from Company A with B and extracts the information.

OptionAB
Questions 61–70
Question 61

Which of the following is a technique for creating one (1) new piece of content by combining publicly available Web pages and Web services, such as embedding and displaying map information provided by another Web service within the campus guide Web page of a university?

Question 62

Which of the following is an appropriate description of an ad hoc network?

Question 63

Same question on ITPEC: Apr 2025 Q21 +1 more

Which of the following is an Open Source Software (OSS) OS that is used in mobile devices such as smartphones and tablets?

Question 64

Among A through D, which of the following lists all and only the appropriate items that can be achieved by installing a firewall?

AConstruction of a DMZ for installing a Web server and a mail server that are made public to the outsideBPrevention of unauthorized access from an external network to the organization’s internal networkCEntry of only the persons who are authorized for access, by installing it at the entrance of a server roomDDistribution of server load by dynamically allocating a large number of requests from an unspecified large number of clients to multiple servers
Question 65

Same question on ITPEC: Apr 2025 Q28

An “Employee” table and a “Department” table that are to be managed with a relational database were created on the basis of the conditions (i) through (v). Which of the following is the most appropriate primary key for the “Employee” table?

[Conditions](i)Each employee has one (1) employee number that is not duplicated.(ii)There can be employees with the same first name and family name.(iii)Each department has one (1) department code that is not duplicated.(iv)Each department has multiple employees.(v)Each employee belongs to only one (1) department.

Employee

EmployeeNumberEmployeeNameDepartmentCodeDateOfBirthAddress

Department

Department​CodeDepartment​NameLocation
Question 66

Same question on ITPEC: Apr 2026 Q16 +1 more

In the specification of the capacity of a battery that is embedded in a device such as an IoT device or a smartphone, which of the following is the appropriate meaning of “100mAh”?

Question 67

Same question on ITPEC: Oct 2024 Q11

Which of the following is the most appropriate description concerning deep learning?

Question 68

Same question on ITPEC: Oct 2025 Q40

In a wireless LAN router, which of the following is the appropriate explanation of a function that is set up for devices brought in from external locations and is called a “guest port” or a “guest SSID” or other such names?

Question 69

Which of the following is an appropriate description of a cyber kill chain?

Question 70

Which of the following lists all and only the effects that are obtained by attaching a digital signature to an e-mail?

AAvailability is improved.BIntegrity is improved.CConfidentiality is improved.
Questions 71–80
Question 71

Which of the following is an example where kinsoku processing (line breaking rules), a function of document creation software, was performed?

Question 72

Same question on ITPEC: Oct 2025 Q41

Which of the following is the appropriate combination of damage by incidents (i) through (iii), and confidentiality, integrity, and availability in information security?

(i)A website is taken down by a DDoS attack.(ii)Inaccurate data is entered because of a typing mistake on a keyboard.(iii)Personal information is leaked because a PC is infected with malware.
Option(i)(ii)(iii)
Question 73

Same question on ITPEC: Apr 2024 Q34

A large number of IP addresses are required in order to connect a massive number of IoT devices to the Internet, so the decision was made to use the Internet Protocol with IP addresses that have a length of 128 bits. Which of the following is this protocol?

Question 74

In the entry and exit control of an area protected by security, such as a server room, which of the following is used as a measure to prevent tailgating, where other persons also enter the room together on the authentication of one person?

Question 75

Which of the following is an appropriate description concerning biometric authentication?

Question 76

When risk treatment in risk management for information security is classified into the four (4) categories of risk avoidance, risk sharing, risk mitigation, and risk retention, which of the following is the category of taking out cyber insurance in preparation for damage when an information leakage occurs?

Question 77

Which of the following is an appropriate description concerning the ACID properties of transaction processing?

Question 78

The function checkDigit receives, as the argument, the integer-type array originalDigit in which the digits of each place of a 9-digit decimal integer are stored in order from the highest place, and returns, as the return value, the check digit calculated by the following procedure. Which of the following is the appropriate piece of code to be inserted into A in the program? Here, the array index starts at 1.

[Procedure]

(1)Total the values of the elements with indexes 1 through 9 of the array originalDigit.(2)If the total value is greater than 9, total the digits of each place when the total value is expressed as a decimal integer. Repeat this operation until the total value becomes 9 or less.(3)Use the value obtained in (2) as the check digit.
[Program]
○ integer: checkDigit(integer []: originalDigit)
integer: i, j, k
j ← 0
for (increase i from 1 to the number of elements in originalDigit by 1)
j ← j + originalDigit[i]
endfor
while (j is greater than 9)
k ← the quotient of j ÷ 10 /* For a 9-digit decimal number, j never exceeds 2 digits */
A
endwhile
return j
Question 79

Same question on ITPEC: Oct 2023 Q9

When the process that is shown in the flowchart is ended, which of the following is the value of x?

StartLet x be 98Let y be 42Iterationx = y (Note)x : y≤>Let the new x bethe result ofcalculation of x - yLet the new y be theresult of calculationof y - xIterationEnd

Note: The condition of the either boundary of the iteration indicates the end condition.

Question 80

Which of the following makes it possible to provide various information to the driver in real time by linking sensors and display devices mounted on a moving body such as an automobile with communication systems and information systems?

Questions 81–90
Question 81

Same question on ITPEC: Apr 2025 Q13

Which of the following is the appropriate description concerning the performance of a CPU?

Question 82

Company A performs user authentication for its internal system by using employees’ user IDs and passwords. In order to strengthen security, the company has decided to add one (1) new authentication function to this system. Among the authentication functions A through C, which of the following lists all and only the functions that make the authentication two-factor authentication when added to this system?

AAuthentication that reads the IC card issued to the employee as Company A’s employee ID cardBAuthentication that has the user enter the answer to a secret question that has been registered in the system in advance and that only the user knowsCAuthentication that compares the features of the user’s face that have been registered in the system in advance with the features of the face read by a camera at the time of authentication
Question 83

Same question on ITPEC: Oct 2023 Q29

Which of the following is a database model that represents data in a table that is composed of rows and columns?

Question 84

Same question on ITPEC: Apr 2025 Q12

Which of the following is a type of device that is also used as a memory device in IoT devices, and has a lower power consumption and higher impact resistance than an HDD as it has memory media that is made of semiconductors and does not have any moving components?

Question 85

When an information security policy is composed of three (3) documents, namely, basic policy, standards, and procedures, which of the following is the appropriate explanation concerning these documents?

Question 86

When risk assessment in information security is divided into three (3) processes, namely, risk identification, risk analysis, and risk evaluation, which of the following is the most appropriate description concerning risk analysis?

Question 87

Which of the following is one of the protocols for receiving e-mails from a mail server, and has the following characteristics?

①There is no need to import mail information into a mailbox in the PC and manage it there; a mailbox composed of multiple folders can be created on the mail server to manage mail information.②Even if the terminals used, such as a PC or a smartphone, are different, the mail information in the same mailbox can be referenced and managed.
Question 88

Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning data formats that are used when information collected by an IoT device is sent to an IoT server?

The A format is a data format that indicates the separation of data with delimiter characters such as commas, and the B format is a markup language and is a data format in which the logical structure of data can be described by using tags.

OptionAB
Question 89

Which of the following is an appropriate description concerning the text format and the HTML format that are used for outgoing messages and are specified when an e-mail is created?

Question 90

There is a file system that can be represented by a tree structure in which directories or files correspond to nodes. When it is represented as shown in the figure with the root directory as the root, which of the following is the most appropriate combination of what corresponds to a node, which is an intermediate node, and to a leaf, which is an end node? Here, empty directories are allowed.

RootLeafNodeLeafLeaf
OptionNodeLeaf
Questions 91–100
Question 91

Which of the following is an example of an act that corresponds to social engineering?

Question 92

BLE, which is used for communication in IoT area networks and other such purposes, is a specification that was added in Bluetooth 4.0. Which of the following is an appropriate description concerning BLE?

Question 93

When the long side of a sheet of A3-size paper is folded in half, it becomes the size of A4, and the ratio of short side : long side does not change. Approximately how many times the long side of A4 size is the long side of A3 size?

Question 94

Same question on ITPEC: Oct 2024 Q23

Which of the following is an explanation of the printing method of an inkjet printer?

Question 95

Which of the following is an attack that diverts a large amount of authentication information obtained illegitimately, such as by stealing it from a website other than the attack target, and attempts to intrude illegitimately into the targeted website?

Question 96

The functions calcX and calcY perform calculations by using the argument inData, and make the results their return values. When the function calcX was called as calcX(1), the value of the variable num of the function calcX changed as 1→3→7→13, and the return value was 13. When the function calcY was called as calcY(1), the value of the variable num of the function calcY changed as 1→5→13→25, and the return value was 25. Which of the following is the appropriate combination of words to be inserted into A and B in the programs?

[Program 1]
○ integer: calcX(integer: inData)
integer: num, i
num ← inData
for (increase i from 1 to 3 by 1)
num ← A
endfor
return num
[Program 2]
○ integer: calcY(integer: inData)
integer: num, i
num ← inData
for (B)
num ← A
endfor
return num
OptionAB
Question 97

Same question on ITPEC: Oct 2025 Q13 +1 more

There is an IoT system that automatically opens and closes the water gate for a rice field by measuring the water level in the rice field. Which of the following is the appropriate combination of terms to be inserted into blanks A and B in the figure?

IoT deviceIoT serverWater level in therice fieldWater gate in therice fieldCommunicationsfunction moduleABAnalyzes the receivedwater level data andissues instructions foropening and closingthe water gateLegend: Direction of transmission of data and signal
OptionAB
Question 98

Which of the following is the term for the operation that extracts only the Name column from the “Employee” table managed in a relational database?

Employee

Employee numberNameDepartment code
H001Shiken HanakoG02
H002Joho TaroG01
H003Kodo JiroG03
H004Gozen SakurakoG03
H005Gogo SaburoG02
Question 99

Same question on ITPEC: Oct 2025 Q16

Among the descriptions A through C below concerning the effects that are obtained by simultaneously running multiple virtual servers on one (1) physical computer, which of the following lists all and only the appropriate descriptions?

A:Each virtual server can run an OS with a different version, and the resources of the physical computer can be utilized effectively.B:The throughput that is gained when the number of virtual servers is increased is the same as when the number of physical computers is increased by the same number.C:A volume of data that is the same as the capacity of the HDD on the physical computer can be simultaneously recorded on all of the virtual servers.
Question 100

Immediately after a certain website on the Internet was viewed on a business PC connected to the wireless LAN network installed in the company, events occurred that suggest the possibility of infection with malware, such as the web browser suddenly terminating and unknown files being created. Which of the following is the appropriate action that the user of this PC should take first?

LearnIPA
Review
History
Profile