Questions IPA Japan published in 令和4年度 ITパスポート試験 公開問題, translated into English, with IPA's answers. ITPEC is based on the same exams, so they are good practice for ITPEC too.
Among the descriptions A through C concerning copyrights and patent rights, which of the following lists all and only the appropriate descriptions?
Same question on ITPEC: Oct 2024 Q79
Which of the following is the most appropriate marketing strategy for narrowing down the customer base to focus on by classifying customers on the basis of age, gender, family structure, and the like, and analyzing the purchasing behaviors of each group?
Same question on ITPEC: Oct 2023 Q91
Which of the following is software for performing basic control of hardware mounted on a gaming console, household appliances, etc.?
Which of the following is the most appropriate mechanism that increases the efficiency and effectiveness of learning by accumulating and analyzing the learning history of individuals through the use of IT, and providing the optimal content according to each learner’s learning progress and level of understanding?
Same question on ITPEC: Oct 2024 Q73 +1 more
Which of the following is the most appropriate description of NDA?
Among the descriptions A through C concerning the patenting of a technology developed in-house, which of the following lists all and only the appropriate effects that can be expected to be obtained directly?
For the purpose of optimizing business operations and information systems, the current state is first grasped in four layers, for example, business, data, application, and technology, and the ideal image that serves as the goal is set. Next, the gap between the current state and the ideal is clarified, and the improvement activities toward the ideal image that serves as the goal are defined as a migration plan. Which of the following is the most appropriate technique for such optimization?
Same question on ITPEC: Apr 2023 Q99
For the reconstruction of a business system, an RFI is scheduled to request multiple vendors to submit an implementation image of the new system. In that regard, which of the following is appropriate information that the vendors are requested to submit at the same time?
Among the inappropriate acts A through C, which of the following lists all and only the acts that are regulated by the Act on the Prohibition of Unauthorized Computer Access?
Same question on ITPEC: Apr 2024 Q85
Which of the following is an appropriate description of a “patent portfolio” that is important for establishing the patent strategy?
When all the transactions up to the close of business on May 31 with a business partner whose credit limit is set at 30 million yen are as shown in the table, what is the remaining credit available to the business partner at that point, in 10,000 yen? Here, orders received are also included in the credit, and collection by a promissory note before its maturity date is not regarded as collection.
Same question on ITPEC: Apr 2025 Q91 +1 more
Crowdfunding can be classified into loan-based, donation-based, purchase-based, or investment-based types, depending on the form of funding and the way the compensation is paid. In order to start a new business, Company A has decided to raise funds through crowdfunding and pay a part of the profits to the funders as dividends. Which of the following is the most appropriate type of crowdfunding used by Company A?
Which of the following is an appropriate document for which disclosure can be requested on the basis of the Act on Access to Information Held by Administrative Organs?
Which of the following is the most appropriate description concerning a shrink-wrap agreement, which is one of the license agreements for commercially available software packages and the like?
When a business process is modeled by using the UML activity diagram shown as an example, which of the following can be represented?
Which of the following is the most appropriate description concerning the initiatives that have become prominent since Industry 4.0?
Company A, a manufacturing and sales company, set strategic themes by using the concept of the balanced scorecard. Which of the following is the most appropriate strategic theme based on the business process (internal business process) viewpoint?
To represent certain data, the use of either one (1) JAN code or one (1) QR code is being considered. When the one with the larger maximum amount of data that can be represented is adopted, which of the following is an appropriate result of the consideration?
The “Social Principles of Human-Centric AI” established by the government state that a society that respects three (3) values as its philosophy and pursues their realization should be built. Which of the following lists all and only the visions of society whose realization should be pursued?
Same question on ITPEC: Apr 2026 Q84 +1 more
Which of the following is the purpose of constructing an SCM system?
Which of the following is the most appropriate description of an example of supervised learning?
Among A through D, which of the following lists all and only the diagrams and charts that are used for representing business processes when business processes are improved?
Same question on ITPEC: Oct 2025 Q84
Which of the following is the appropriate means of complementing the technologies and know-how of one’s company with those of other companies in a short period of time?
Which of the following corresponds to “special care-required personal information,” which is defined in the Act on the Protection of Personal Information as requiring particular care in its handling?
When the assets, liabilities, and net assets of Company A in a certain period are as shown below, what is the current ratio in percentage, which is one of the indicators of management safety and shows the short-term ability to pay?
Which of the following is the most appropriate description concerning countermeasures against money laundering?
Same question on ITPEC: Oct 2025 Q71 +2 more
Which of the following is the expression that calculates operating profit?
Same question on ITPEC: Apr 2025 Q71
In order to improve the customer service level of a call center, the complaints received from customers concerning the response of the call center are classified and tabulated. Which of the following is a chart suitable for displaying the number of complaints in a bar chart and the cumulative percentage in a line chart, in descending order of complaints, for determining the priority of improvement?
Same question on ITPEC: Oct 2025 Q92 +1 more
Which of the following is the most appropriate diagram representing the flow of business operations after concurrent engineering is applied? Here, the arrows in the diagram show the flow of business operations, and each activity name is displayed on top.
Which of the following is the most appropriate term that represents the state or degree to which various people can operate, obtain, and use IT equipment, software, information, etc. in the same way, regardless of differences in users’ physical characteristics and abilities?
Same question on ITPEC: Oct 2025 Q100 +1 more
In an online service, a website with a newly created design and a website with a conventional design were run in parallel experimentally to compare them and find out the one that makes its users more likely to apply for paid services. Which of the following is the most appropriate technique used at this time?
A call center has been studying business reform that utilizes AI, and has narrowed down the system to be introduced. However, there are many unclear points, such as whether the expected effects can be obtained, so it decided to conduct a trial and verify feasibility. What is such verification called?
Same question on ITPEC: Apr 2026 Q56 +1 more
Which of the following is the appropriate description concerning WBS created in a project?
Same question on ITPEC: Oct 2023 Q65
Several functions are implemented for internal control by the system. Which of the following is the appropriate function that the process below implements?
The login screen is displayed. A user enters the user ID and the password. If the combination of the user ID and the password matches the already-registered combination, the screen transits to the business menu screen. If not, the screen does not transit, and an error message is displayed.
Same question on ITPEC: Apr 2024 Q62
In order to improve the value of an IT service to be provided, it is necessary to consider the balance of three (3) items, namely the offer price of the service, the functions of the service, that is, what the service can offer, and a guarantee of the service with maintained availability. Which of the following is a description that corresponds to guarantee of the service of an instant messenger?
Same question on ITPEC: Apr 2026 Q60
A satellite office is constructed in a company that promotes telework. Measures to prevent overcurrent caused by lightning strikes were examined for network devices and PCs used in the satellite office. Which of the following is the most appropriate effective measure?
Same question on ITPEC: Apr 2024 Q50
Which of the following is the most appropriate term expressing initiatives to improve the services where the development side and the operations side of the system cooperate to proactively automate operations of the system and transition to the new production system, and release new functions?
In the arrow diagram in the figure, activity B was completed 2 days late. Therefore, in order to complete all the activities within the scheduled period, it was decided to add personnel to activity D. When 20 personnel are initially assigned to activity D, what is the minimum number of personnel that need to be added to activity D? Here, the work efficiency of the personnel is uniform.
Which of the following is an appropriate purpose of incident management in IT service management?
Same question on ITPEC: Oct 2025 Q49 +1 more
Which of the following is the appropriate description concerning the black box test?
Same question on ITPEC: Oct 2024 Q61
Among the descriptions A through D below, which of the following lists all and only the activities of facility management?
In the quality management of a system development project, which of the following is an appropriate description of the method for pursuing the root cause by associating quality problems with their causes?
Same question on ITPEC: Apr 2026 Q59 +1 more
In order to automatically respond to queries from users of an IT service, it was decided to install a chatbot. Which of the following is the most appropriate management process where such automation by a chatbot is effective?
Software of 120 k steps was developed. When the actual productivity in each process of the development is as shown in the table, how many person-months is the effort for the entire development? Here, productivity is the number of k steps per person-month.
Unit: k steps/person-month
In the following description concerning SLA in IT service management, which of the following is the appropriate combination of words to be inserted into blanks A and B?
An SLA is a written agreement exchanged between A and B. The target values of the service that A expects are quantified, agreed upon, and then specified in the SLA, and B measures and evaluates them and then improves the quality of the service.
Same question on ITPEC: Apr 2026 Q57 +1 more
Company A orders the development of a system to Company B and starts a system development project. Among (i) through (iv) below who are concerned with the project, which of the following lists all and only the stakeholders of the project?
Among A through D, which of the following lists all and only the appropriate descriptions concerning the investigation means that a system auditor uses in a preliminary investigation or a main investigation in order to obtain reasonable evaluations and conclusions?
A service desk that handles telephone inquiries from customers introduced an operator support system such as the following. Among the effects A through C that can be expected from introducing this system, which of the following lists all and only the appropriate ones?
The system recognizes the conversation between the customer and the operator, instantly matches it against a knowledge database, and displays the items that should be confirmed next and the candidates for the optimal answer on the operator’s display.
Which of the following is an appropriate example of a measure for reducing the damage, assuming a case where damage has been suffered from ransomware?
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning reasoning?
A is a method of obtaining a rule that is common to individual cases on the basis of those cases, and the rule obtained B.
In the planning, operation, performance evaluation, and improvement of an ISMS, which of the following is implemented in performance evaluation?
Same question on ITPEC: Oct 2025 Q3 +1 more
Which of the following is the combination of the mean and median of the data?
[Data]
10, 20, 20, 20, 40, 50, 100, 440, 2000
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning the keys used in public key cryptography?
When Company A and Company B, each of which has a public key and a private key, send and receive information, it was decided that the information would be encrypted before it is sent, so that its content would not be known even if the communication were intercepted by others.
When information is sent from Company A to Company B, Company A sends Company B the information encrypted by using A. Company B decrypts the information received from Company A with B and extracts the information.
Which of the following is a technique for creating one (1) new piece of content by combining publicly available Web pages and Web services, such as embedding and displaying map information provided by another Web service within the campus guide Web page of a university?
Same question on ITPEC: Apr 2025 Q21 +1 more
Which of the following is an Open Source Software (OSS) OS that is used in mobile devices such as smartphones and tablets?
Among A through D, which of the following lists all and only the appropriate items that can be achieved by installing a firewall?
Same question on ITPEC: Apr 2025 Q28
An “Employee” table and a “Department” table that are to be managed with a relational database were created on the basis of the conditions (i) through (v). Which of the following is the most appropriate primary key for the “Employee” table?
Employee
Department
Same question on ITPEC: Apr 2026 Q16 +1 more
In the specification of the capacity of a battery that is embedded in a device such as an IoT device or a smartphone, which of the following is the appropriate meaning of “100mAh”?
Same question on ITPEC: Oct 2024 Q11
Which of the following is the most appropriate description concerning deep learning?
Same question on ITPEC: Oct 2025 Q40
In a wireless LAN router, which of the following is the appropriate explanation of a function that is set up for devices brought in from external locations and is called a “guest port” or a “guest SSID” or other such names?
Which of the following lists all and only the effects that are obtained by attaching a digital signature to an e-mail?
Which of the following is an example where kinsoku processing (line breaking rules), a function of document creation software, was performed?
Same question on ITPEC: Oct 2025 Q41
Which of the following is the appropriate combination of damage by incidents (i) through (iii), and confidentiality, integrity, and availability in information security?
Same question on ITPEC: Apr 2024 Q34
A large number of IP addresses are required in order to connect a massive number of IoT devices to the Internet, so the decision was made to use the Internet Protocol with IP addresses that have a length of 128 bits. Which of the following is this protocol?
In the entry and exit control of an area protected by security, such as a server room, which of the following is used as a measure to prevent tailgating, where other persons also enter the room together on the authentication of one person?
Which of the following is an appropriate description concerning biometric authentication?
When risk treatment in risk management for information security is classified into the four (4) categories of risk avoidance, risk sharing, risk mitigation, and risk retention, which of the following is the category of taking out cyber insurance in preparation for damage when an information leakage occurs?
Which of the following is an appropriate description concerning the ACID properties of transaction processing?
The function checkDigit receives, as the argument, the integer-type array originalDigit in which the digits of each place of a 9-digit decimal integer are stored in order from the highest place, and returns, as the return value, the check digit calculated by the following procedure. Which of the following is the appropriate piece of code to be inserted into A in the program? Here, the array index starts at 1.
[Procedure]
originalDigit.(2)If the total value is greater than 9, total the digits of each place when the total value is expressed as a decimal integer. Repeat this operation until the total value becomes 9 or less.(3)Use the value obtained in (2) as the check digit.Same question on ITPEC: Oct 2023 Q9
When the process that is shown in the flowchart is ended, which of the following is the value of x?
Note: The condition of the either boundary of the iteration indicates the end condition.
Which of the following makes it possible to provide various information to the driver in real time by linking sensors and display devices mounted on a moving body such as an automobile with communication systems and information systems?
Same question on ITPEC: Apr 2025 Q13
Which of the following is the appropriate description concerning the performance of a CPU?
Company A performs user authentication for its internal system by using employees’ user IDs and passwords. In order to strengthen security, the company has decided to add one (1) new authentication function to this system. Among the authentication functions A through C, which of the following lists all and only the functions that make the authentication two-factor authentication when added to this system?
Same question on ITPEC: Oct 2023 Q29
Which of the following is a database model that represents data in a table that is composed of rows and columns?
Same question on ITPEC: Apr 2025 Q12
Which of the following is a type of device that is also used as a memory device in IoT devices, and has a lower power consumption and higher impact resistance than an HDD as it has memory media that is made of semiconductors and does not have any moving components?
When an information security policy is composed of three (3) documents, namely, basic policy, standards, and procedures, which of the following is the appropriate explanation concerning these documents?
When risk assessment in information security is divided into three (3) processes, namely, risk identification, risk analysis, and risk evaluation, which of the following is the most appropriate description concerning risk analysis?
Which of the following is one of the protocols for receiving e-mails from a mail server, and has the following characteristics?
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning data formats that are used when information collected by an IoT device is sent to an IoT server?
The A format is a data format that indicates the separation of data with delimiter characters such as commas, and the B format is a markup language and is a data format in which the logical structure of data can be described by using tags.
Which of the following is an appropriate description concerning the text format and the HTML format that are used for outgoing messages and are specified when an e-mail is created?
There is a file system that can be represented by a tree structure in which directories or files correspond to nodes. When it is represented as shown in the figure with the root directory as the root, which of the following is the most appropriate combination of what corresponds to a node, which is an intermediate node, and to a leaf, which is an end node? Here, empty directories are allowed.
BLE, which is used for communication in IoT area networks and other such purposes, is a specification that was added in Bluetooth 4.0. Which of the following is an appropriate description concerning BLE?
When the long side of a sheet of A3-size paper is folded in half, it becomes the size of A4, and the ratio of short side : long side does not change. Approximately how many times the long side of A4 size is the long side of A3 size?
Same question on ITPEC: Oct 2024 Q23
Which of the following is an explanation of the printing method of an inkjet printer?
Which of the following is an attack that diverts a large amount of authentication information obtained illegitimately, such as by stealing it from a website other than the attack target, and attempts to intrude illegitimately into the targeted website?
The functions calcX and calcY perform calculations by using the argument inData, and make the results their return values. When the function calcX was called as calcX(, the value of the variable num of the function calcX changed as 1→3→7→13, and the return value was 13. When the function calcY was called as calcY(, the value of the variable num of the function calcY changed as 1→5→13→25, and the return value was 25. Which of the following is the appropriate combination of words to be inserted into A and B in the programs?
Same question on ITPEC: Oct 2025 Q13 +1 more
There is an IoT system that automatically opens and closes the water gate for a rice field by measuring the water level in the rice field. Which of the following is the appropriate combination of terms to be inserted into blanks A and B in the figure?
Which of the following is the term for the operation that extracts only the Name column from the “Employee” table managed in a relational database?
Employee
Same question on ITPEC: Oct 2025 Q16
Among the descriptions A through C below concerning the effects that are obtained by simultaneously running multiple virtual servers on one (1) physical computer, which of the following lists all and only the appropriate descriptions?
Immediately after a certain website on the Internet was viewed on a business PC connected to the wireless LAN network installed in the company, events occurred that suggest the possibility of infection with malware, such as the web browser suddenly terminating and unknown files being created. Which of the following is the appropriate action that the user of this PC should take first?