LearnIPAReviewHistoryAI
Profile
AboutHow I passedFeedback
LearnIPA
Review
History
Profile
LearnIPAReviewHistoryAI
Profile
AboutHow I passedFeedback
IPA IP 2023

Questions IPA Japan published in 令和5年度 ITパスポート試験 公開問題, translated into English, with IPA's answers. ITPEC is based on the same exams, so they are good practice for ITPEC too.

Question 1

Same question on ITPEC: Oct 2024 Q85

Which of the following is a technique that increases the potential for success in the development of a new business model or product, by creating the minimum service or product on the basis of a hypothesis, and performing repeated verification of customer value in a short interval of times?

Question 2

Among A through C below, which of the following lists all and only those that correspond to works as defined by the Copyright Act?

AA recording of a lecture given without a manuscriptBThe arrival times of buses printed in a timetableCA highly creative technical invention
Question 3

Which of the following is the most appropriate term that represents the economic effect that foreigners who visit Japan for sightseeing and other purposes bring to the country?

Question 4

The profitability of the ASP usage method and the in-house center usage method with in-house development (hereinafter referred to as the “in-house method”) is compared. Under the conditions below, the expected profit (benefit amount − cost) of the ASP usage method becomes larger than that of the in-house method when the initial investment amount of the in-house method exceeds how much, in 10,000 yen? Here, the comparison period is 5 years.

~ [Conditions] (amounts in 10,000 yen)
~ • | For both methods, the benefit amount from using the system is 500/year.

~ • | For the ASP usage method, the initial cost is 0, and the usage fee is 300/year.

~ • | For the in-house method, the initial investment amount is depreciated by the straight-line method, and the residual book value after 5 years is 0. In addition, the operating cost is 100/year.

~ • | Interest and other costs are not considered.

Question 5

Same question on ITPEC: Oct 2024 Q93

Which of the following is the most appropriate utilization of RPA for a company?

Question 6

Company A acquires data consisting of many items, such as customer behavior, the weather, and the locations of stores. It is considering explaining changes in sales quantity by analyzing these data. In doing so, it wants to narrow down the parameters used for the explanation to as few as possible. Which of the following is the most appropriate analysis method to be used in this case?

Question 7

Same question on ITPEC: Apr 2024 Q71

Which of the following is most appropriate as the person with responsibility for an information systems strategy that is created on the basis of a business strategy?

Question 8

Same question on ITPEC: Apr 2024 Q84

With the purpose of increasing the number of contracts concluded, salespersons in Company A’s sales department began an activity to make proposals for plans to customers. A key goal indicator (KGI) and key performance indicator (KPI) are to be set as indexes for achievement of sales activities. Which of the following is the most appropriate combination of KGI and KPI in this activity?

OptionKGIKPI
Question 9

Which of the following lists all and only the appropriate purposes of establishing a social media policy?

ATo set out the attitudes, rules, and so on for when the company uses social media, so that people outside the company can understand themBTo show the rules for when the officers and employees belonging to the company use social media, whether for business or private purposesCTo show the conditions for when social media outlets conduct interviews with or make inquiries to the company, and the rules for handling them at the point of contact
Question 10

Which of the following is the most appropriate description concerning a forum standard?

Questions 11–20
Question 11

Same question on ITPEC: Apr 2024 Q99

Which of the following is the most appropriate word to indicate the use of IoT, AI, and other IT in order to strategically overhaul a business model and produce new added value?

Question 12

Which of the following lists all and only the examples of services that are realized by a contactless IC chip built into a smartphone and an external RFID reader?

ADuring a call while moving, the base station is switched automatically so that the call is maintained.BIt is used as a commuter pass when passing through an automatic ticket gate at a station.CEven overseas, the same services as in one’s home country, such as e-mail, are used.DA QR code is read in order to obtain payment procedure information.
Question 13

Same question on ITPEC: Oct 2025 Q72

The sales and the costs for a certain product for this month are as shown in the table below. When the unit sales price is changed from 1,000 yen to 800 yen, in order to avoid making a loss, at least how many units need to be sold each month? Here, the fixed cost and the variable cost per unit of the product do not change.

Sales amount2,000,000 yen
Unit sales price1,000 yen
Units sold2,000
Fixed cost600,000 yen
Variable cost per unit700 yen
Question 14

Which of the following lists all and only the appropriate examples of the use of natural language processing, which is one of the fields of utilization of AI?

AOn a website, when text in Japanese is entered, it is immediately translated into another language.BText information posted on SNS at the time of a disaster is collected in real time, and place names, disaster information, and so on are analyzed to grasp the damage situation.CA smart speaker is used to operate home appliances and play music by voice.DA camera installed at the entrance and exit of a parking lot photographs license plates and performs character recognition processing, and when a vehicle that has completed payment approaches the gate, the gate opens automatically.
Question 15

Among the inappropriate acts A through D related to passwords, which of the following lists all and only the acts that are regulated by the Act on the Prohibition of Unauthorized Computer Access?

AIn order to have a colleague perform one’s work on one’s behalf, one’s own ID and password for accessing the internal database were given to the colleague.BA memo of one’s own password for accessing the internal database was stuck on one’s own PC.CA document attached to an e-mail was imported into a PC. The password for viewing the document was given to a person who does not have the right to view the document.DAnother person’s ID and password registered on a popular shopping site were given to a third party without permission.
Question 16

Same question on ITPEC: Oct 2024 Q86

In call handling at a call center, which of the following is the most appropriate example of the use of AI to implement a more effective FAQ system?

Question 17

With the advance of IT and the expansion of related services, it has become possible to use various data and tools in a company’s own business and daily work. Which of the following is the most appropriate term that represents the ability to appropriately utilize such data and tools for purposes such as problem solving?

Question 18

Same question on ITPEC: Oct 2024 Q75

Concerning the EU’s General Data Protection Rules (GDPR), which of the following lists all and only the appropriate descriptions?

A:If a business has an office within the EU region and provides data and services within the EU region, it is subject to the rules.B:If a business has an office within the EU region and provides data and services to Asia, the US, or other such places outside of the EU region, it is not subject to the rules.C:If a business does not have an office within the EU region and provides data and services only to Asia, the US, or other such places outside of the EU region, it is not subject to the rules.D:If a business does not have an office within the EU region and provides data and services from Asia, the US, or other such places to the EU region, it is not subject to the rules.
Question 19

There is a mechanism in which communication equipment built into a beverage vending machine installed in a residential area and a computer that monitors the vending machine remotely send and receive data via a network, so that inventory management is realized. Like this, which of the following is a mechanism in which machines exchange information with each other via a network, so that advanced control and operation are performed autonomously?

Question 20

Same question on ITPEC: Apr 2024 Q72

Which of the following is an index that indicates the efficiency of capital utilization?

Questions 21–30
Question 21

Which of the following is an appropriate example of freemium?

Question 22

Which of the following corresponds to a prepaid payment instrument under the Payment Services Act?

Question 23

Which of the following is the modeling technique and notation for business processes that is maintained by the OMG (Object Management Group) and standardized as the international standard ISO/IEC 19510?

Question 24

When the demand is stable throughout the year, which of the following is the most appropriate description concerning the fixed-quantity ordering system?

Question 25

Same question on ITPEC: Oct 2024 Q76

Among company’s actions A through C below, which of the following lists all and only the acts that may be problematic in terms of compliance?

A:In order to increase awareness of the name of a new product among consumers, a campaign is implemented where anyone can apply for a prize by answering a simple quiz that just asks a part of the product name is published widely in media such as newspapers, the relevant company’s website, and magazines, and one of the applicants is chosen at random to receive a prize of 100,000 yen.B:When a company received an order for an advertisement from an advertiser, the company posted an article on its popular website as a general article that favorably reviews a certain product without indicating that the article is an advertisement.C:A bag with a design inspired by France was manufactured domestically and was put on sale with a tag featuring a photograph of Paris and the French flag, but without noting the country of production.
Question 26

Company A, an assembly manufacturer that also sells its products, has decided to introduce the kanban system as a strategy for improving management efficiency, in order to reduce its parts inventory to the absolute minimum. Which of the following is the most appropriate information system that Company A links online with its inventory management system to realize this strategy?

Here, Company A also manages its parts inventory with the inventory management system. In addition, it is assumed that currently no other system is linked with the inventory management system.

Question 27

Family restaurant chain A has decided to analyze the relationship among three (3) elements for each restaurant, namely the number of seats, the average spend per customer, and the sales, in order to examine its restaurant operation strategy. Which of the following is the most appropriate chart to be used when the three (3) elements of each restaurant are visualized for all restaurants in one (1) chart?

Question 28

Company A, a venture company that develops AI, is going to be listed on a financial instruments exchange for the first time for the purpose of raising funds. Which of the following is the most appropriate term that represents newly offering a company’s unlisted shares to the public in this way?

Question 29

Which of the following is the law that regulates the act of selling programs that disable the copy protection of video software without a justifiable reason, in order to prevent unfair sales practices?

Question 30

Same question on ITPEC: Apr 2024 Q92

Which of the following is the most appropriate term to express the initiatives that are implemented by a financial institution or other such institution in order to prevent acts where funds obtained illegally are disguised as being obtained by legitimate means?

Questions 31–40
Question 31

Which of the following is the most appropriate term to express a mechanism that expands business through means such as mutually using data and software via published interfaces that link the systems of various companies, and creating new services while promoting collaboration with those companies?

Question 32

Same question on ITPEC: Apr 2024 Q100

Which of the following is the most appropriate explanation of an RFP that is created by a company, government organization, or other such organization that is planning the introduction of a new system?

Question 33

To produce one (1) unit of product A, two (2) units of part a and one (1) unit of part b are required. Part a is a purchased part with an order quantity of 150 units per order and a procurement period of 1 week, and part b is a purchased part with an order quantity of 100 units per order and a procurement period of 2 weeks. When the 6-week production plan for product A and the on-hand inventory quantities of part a and part b in week 1 are as shown in the table, in which week at the latest do the parts need to be ordered? Here, the ordering and delivery of parts are each performed at the beginning of a week, and delivered parts can be used for production immediately.

Week123456Production quantity of product A04040404040080808080802500150PartaRequired quantityOn-hand inventory quantityOrder quantityPartbRequired quantityOn-hand inventory quantityOrder quantityNote: The shaded parts are not shown.
Question 34

Among the descriptions A through C, which of the following lists all and only those that are stated in the “Social Principles of Human-Centric AI” as matters that society should keep in mind in order for AI to be accepted by society and used appropriately?

AIn using AI, AI itself must be made more advanced so that AI, rather than people judging and deciding how to use it, can judge and decide autonomously.BThe use of AI must not infringe on the fundamental human rights guaranteed by the Constitution and international norms.CIn order to spread AI at an early stage, systems for people who have advanced information literacy must be realized first, and thereafter AI must be developed in stages so that systems that let information-disadvantaged people also enjoy the benefits of AI are realized.
Question 35

Same question on ITPEC: Oct 2024 Q97

Which of the following is the most appropriate description of the Fourth Industrial Revolution?

Question 36

Same question on ITPEC: Apr 2026 Q62

Which of the following is the most appropriate description concerning business improvement for a service desk?

Question 37

Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning the code of conduct of system auditors?

For a system auditor, independence in terms of A, such as not belonging to the same chain of command as the organization subject to audit, needs to be ensured. In addition, a system auditor is required to have the mental attitude of making fair judgments from B standpoint.

OptionAB
Question 38

Which of the following is an appropriate diagram that shows the relationship between the number of program steps and the number of defects of multiple similar projects in order to examine the quality targets of a system development project?

Question 39

Since there is no specification for software in operation, the source code was analyzed and a specification of the program was created. What is this method called?

Question 40

Same question on ITPEC: Oct 2025 Q50

Which of the following is the most appropriate description concerning DevOps in software development?

Questions 41–50
Question 41

As a result of performing activities based on the following arrow diagram, activity D was delayed by 2 days, and activity F was completed 3 days ahead of schedule. How much did the number of days required for the entire set of activities change compared with the plan?

A2C4D1F5B3G5E1
LegendActivity nameRequired days
Question 42

Same question on ITPEC: Oct 2024 Q46

In software development, which of the following is the appropriate combination of the descriptions A through C concerning testing and testing processes?

A:Check that processing ends within the planned operating time.B:Check the interface between software.C:Comprehensively check the internal paths of a program.
OptionUnit testIntegration testSystem test
Question 43

Same question on ITPEC: Apr 2024 Q49

Among the descriptions A through D concerning software installation, which of the following lists all and only the appropriate descriptions?

A:In a new development, installation is performed without delay by the deadline without the creation of an implementation plan.B:After software installation is performed, an implementation plan and an implementation report must be created promptly and agreement obtained.C:When software is developed in-house by a company, the scope of impact is internal, so installation is performed after the creation of an implementation plan, and agreement on the implementation plan is obtained after implementation.D:When a function is to be added to software in production system, an implementation plan is created for the software with the added function, agreement is obtained, and software installation is performed.
Question 44

The IT department of Company A is considering extending the support hours to 24 hours in order to improve the service availability of the help desk. Company B, which has been entrusted with the help desk operations by Company A, proposed that, to achieve this, it would introduce and use a chatbot at Company B so that the late-night hours are covered by automatic responses, and Company A agreed to this because 24-hour support would be possible. Which of the following is the most appropriate document to be used for this agreement?

Question 45

In project management, it is required to balance competing constraints such as schedule, cost, and quality. Which of the following is an appropriate response when it has been decided to shorten the planned development schedule?

Question 46

Indicators concerning IT services include MTBSI (Mean Time Between Service Incidents), which is the mean time between occurrences of incidents that make an IT service unavailable, and it represents how unlikely service interruptions are to occur. Which of the following is the most appropriate example of improving the MTBSI in an IT service?

Question 47

Same question on ITPEC: Apr 2025 Q62

Which of the following is the appropriate combination of IT service management and the content of the SLA for a hosting service A through C below?

A:The time that a server is operationalB:The time taken until a specified member of staff is notified after it is detected that the amount of free space on a disk has reached a set thresholdC:The time taken until a specified member of staff is notified after an unauthorized access is detected
OptionService availabilitymanagementCapacitymanagementInformation securitymanagement
Question 48

Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning the preparation of the system environment?

There is A as a concept by which companies, etc. keep resources such as buildings and facilities, which make up the system environment, in the best condition. Measures for preparing the system environment based on that concept include the deployment of B, a device that supplies power to servers for a certain period of time when a sudden power outage occurs.

OptionAB
Question 49

Same question on ITPEC: Oct 2024 Q50

Which of the following is the appropriate explanation of refactoring?

Question 50

In internal control, which of the following is the most appropriate example concerning segregation of duties for the purpose of preventing fraud?

Questions 51–60
Question 51

In IT service management, the contents of past incidents were compiled into a database as FAQ. Among the descriptions A through C concerning the items that can be expected to be improved by this, which of the following lists all and only the appropriate ones?

AInformation on the components related to IT services can be checked at any time when necessary.BThe work histories of candidate staff members can be checked, and an appropriate staffing plan can be drawn up.CThe first-time answer rate for inquiries from users increases.
Question 52

Same question on ITPEC: Apr 2025 Q65

Which of the following is the most appropriate objective of an accounting audit?

Question 53

When the activities that a company carries out so that IT is utilized appropriately are divided into activities that decide rules and activities that act in accordance with the rules, which of the following corresponds to an activity that decides rules?

Question 54

Same question on ITPEC: Oct 2024 Q51

Among the descriptions A through D below concerning project management in system development, which of the following lists all and only the failures in scope management?

A:The labor costs incurred in development were underestimated, so the budget was exceeded.B:The time required for development work was set short, so development could not be completed within the planned period.C:A project was started without first deciding the function to be created, so the development period is exceeded.D:Several activities that should be implemented in a project were omitted from the plan, so the system could not be completed.
Question 55

Same question on ITPEC: Oct 2024 Q52

For software development work, a plan is created to complete it with 10 people in a period of 15 days. However, it became known that only eight (8) members of staff could be obtained for the first five (5) days. In order to complete the work in 15 days as planned, how many staff members are required from the 6-th day? Here, the productivity of each member of staff is the same.

Question 56

Which of the following is an appropriate description concerning ISMS cloud security certification?

Question 57

Among security measures in IoT devices, which of the following is an appropriate measure that gives tamper resistance?

Question 58

Which of the following is an attack in which unauthorized software is planted on a website or other such place, and when the site is accessed from the web browser of a PC, smartphone, or other such device, malware is sent in by exploiting a vulnerability of the web browser or other such software without the user noticing?

Question 59

A “Member_management” table that is managed in a relational database was normalized and divided into a “Store” table, a “Member_type” table, and a “Member” table. Which of the following is appropriate as the “Member” table? Here, an underline in a table indicates a primary key, and when one member registers with multiple stores, a member number is assigned for each store.

Member_management

Store_​codeStore_​nameMember_​numberMember_​nameMember_​type_​codeMember_​type_​name
001Sapporo1Shiken Hanako02Gold
001Sapporo2Joho Taro02Gold
002Tokyo1Kodo Jiro03Regular
002Tokyo2Gozen Sakurako01Platinum
003Osaka1Gozen Sakurako03Regular

Store

Store_codeStore_name

Member_type

Member_type_codeMember_type_name
Question 60

The procedure printArray sorts the elements of the array integerArray and outputs them. Which of the following is the output when the procedure printArray is called? Here, the array index starts at 1.

[Program]
○ printArray()
integer: n, m
integer []: integerArray ← {2, 4, 1, 3}
for (increase n from 1 to (the number of elements in integerArray − 1) by 1)
for (increase m from 1 to (the number of elements in integerArray − n) by 1)
if (integerArray[m] > integerArray[m + 1])
swap the values of integerArray[m] and integerArray[m + 1]
endif
endfor
endfor
output all the elements of integerArray from the first one in order, separated by commas
Questions 61–70
Question 61

What is a measure called that is regarded as a basic principle in the design, construction, and operation of IoT systems and other such systems, and ensures information security from the planning and design stages of the system?

Question 62

Authentication factors in information security can be classified into three (3) types. Which of the following is the appropriate set of the three (3) types of authentication factors?

Question 63

When RAID0 and RAID1 are configured by using two (2) HDDs with a capacity of 500 GB, which of the following is the appropriate combination of the storage capacities that can actually be used?

OptionRAID0RAID1
Question 64

The function sigma receives a positive integer as the argument max, and returns the sum of the integers from 1 to max as the return value. Which of the following is the appropriate piece of code to be inserted into A in the program?

[Program]
○ integer: sigma(integer: max)
integer: calcX ← 0
integer: n
for (increase n from 1 to max by 1)
A
endfor
return calcX
Question 65

Which of the following is an appropriate description of the PSK that is set when a PC is connected to a wireless LAN router by using WPA2, a security standard for Wi-Fi?

Question 66

Same question on ITPEC: Apr 2026 Q29 +1 more

Which of the following is the appropriate explanation of commit in transaction processing?

Question 67

Which of the following is an appropriate role of an IDS that is used in a network environment?

Question 68

Same question on ITPEC: Apr 2026 Q33

On computers on the Internet, a range of application programs such as web and e-mail run, and a communications protocol in the application layer that corresponds to each application program is used. Which of the following is a communications protocol that is in a lower layer than these communications protocols, and is commonly used to implement basic communications functions?

Question 69

Which of the following is an appropriate description concerning search algorithms when data stored in an array is searched?

Question 70

Same question on ITPEC: Apr 2024 Q16

In a web service and other services, in order to increase reliability and process a large volume of accesses from users, which of the following is a technique that links multiple computers and makes them work as if they were a single computer?

Questions 71–80
Question 71

Same question on ITPEC: Oct 2025 Q34

Which of the following is the most appropriate description of edge computing in an IoT system?

Question 72

Same question on ITPEC: Apr 2025 Q44

When risk treatment in risk management for information security is divided into the four (4) categories of risk avoidance, risk sharing, risk mitigation, and risk retention, which of the following is the appropriate explanation of risk sharing?

Question 73

Same question on ITPEC: Apr 2024 Q45

When an attacker makes an unauthorized intrusion into a computer, the attacker sometimes changes a program or settings in the computer in order to make further intrusions into the computer easier. Which of the following is the most appropriate term to express the method used by the attacker for further intrusions into the computer?

Question 74

Which of the following is the most appropriate description concerning a neural network?

Question 75

Same question on ITPEC: Oct 2024 Q17

It is determined whether an examinee passed or failed by evaluating the score for two (2) subjects X and Y with a spreadsheet software program. The score of each subject is entered in cells A2 and B2 of the worksheet. When passing criteria (1) or (2) is met, “Pass” is displayed in cell C2, and otherwise, “Fail” is displayed. Which of the following is the expression that is entered in cell C2?

[Passing criteria](1)The total for Subject X and Subject Y is 120 or more.(2)The score for either Subject X or Subject Y is 100.
ABC12Subject XSubject YPass/Fail5080Pass
Question 76

Same question on ITPEC: Apr 2025 Q3

The automation of the inspections performed by a quality controller is considered. By providing as training data 10,000 product images and the results of judgments by the quality controller about whether each product is defective or not, a machine learning model is created to judge whether a product is defective or not. The results of a test judgement by a machine learning model on 100 product images are as shown in the table. When the ratio of the number of images that product is judged to be defective by the machine learning model out of the images that product is judged to be defective by the quality controller is deemed to be the recall rate, what is the recall rate in this test judgement?

Unit: ImagesJudgment by themachine learning modelDefectiveNotdefectiveJudgment bythe qualitycontrollerDefectiveNotdefective551575
Question 77

The results of an examination in four (4) subjects taken by 10,000 examinees are as shown in the table, and it is assumed that the score distribution of every subject follows a normal distribution. When the scores of an examinee in the four subjects were all 71 points, which of the following is the subject in which this examinee obtained the highest deviation value?

Unit: Points

Average scoreStandard deviation
Japanese625
Social studies559
Mathematics586
Science607
Question 78

Which of the following lists all and only the appropriate descriptions concerning the setting of a primary key in a relational database?

AA field whose value duplicates that of another record cannot be used as a primary key.BIt cannot be set so that it overlaps with an index.CThe value of a primary key must be a numeric value.DA primary key can be composed of multiple fields.
Question 79

In the activities of an organization that operates an ISMS on the basis of the PDCA model, the following investigation report was made. In which process of the PDCA model is this investigation performed?

Concerning the receipt of e-mail from outside the company, a malware detection system has been introduced in accordance with the information security policy and is maintained and operated, and it achieves the effect of detecting and discarding dozens of received e-mails with malware attached every day. However, there are no rules or clear operating procedures for security measures concerning the sending of e-mail outside the company, and there is a risk that an incident such as the mistaken sending of an e-mail with company-confidential material attached to an address outside the company may occur.

Question 80

Same question on ITPEC: Oct 2024 Q10

When USB memory or other such external recordable media is connected to a PC, which of the following is an OS function that automatically executes programs or plays movies on the media and can also cause malware infection?

Questions 81–90
Question 81

When an HDD is disposed of, which of the following lists all and only the appropriate measures for preventing information leakage from the HDD?

AData erasure software is used to write random data to all areas of the HDD multiple times.BThe HDD is physically destroyed by using a drill, a media shredder, or the like.CAfter the files are deleted, the HDD is logically formatted.
Question 82

Same question on ITPEC: Oct 2024 Q18

Among the descriptions A through C below concerning Open Source Software (OSS), which of the following is the list that contains all and only the appropriate descriptions?

A:Source code can be modified and redistributed.B:It is free to obtain source code, but maintenance support for a fee must be used.C:The copyright is waived, and it can be used without permission.
Question 83

Same question on ITPEC: Apr 2025 Q34

Which of the following is a technology that is used to make voice calls over the Internet by two (2) parties using the same application on their smartphones or other devices?

Question 84

Which of the following is an appropriate description concerning an e-mail to which the sender’s digital signature that uses a message digest is attached?

Question 85

Same question on ITPEC: Apr 2026 Q21 +1 more

Which of the following is a technology that is also used in measures against tampering of software in IoT devices and verifies the digital signature of the OS, firmware, or other such software when it is started, and only executes the software if the verification is successful?

Question 86

A message is to be sent by using a hybrid encryption method. In the figure that shows the procedure for encrypting the message and the key for decryption, when the key used for encrypting the message is (1) and the key used for encrypting (1) is (2), which of the following is the appropriate combination of words to be inserted into A and B in the figure?

(2)Recipient’sBkeyEncryption(1)AkeyEncryptionMessageEncryptedAkeyEncryptedmessageSend
OptionAB
Question 87

Which of the following is a technology that is also used in IoT area networks and that uses power lines also as a transmission path by superimposing high-frequency communication signals on the power lines that supply electricity and transmitting them?

Question 88

Which of the following is a read-only DVD?

Question 89

Which of the following is an attack that does not use technical methods, such as impersonating an employee of a company to obtain an ID or a password, or obtaining confidential information from a wastebasket?

Question 90

Which of the following is an appropriate example of implementing in the workplace a clear desk, which is a physical and environmental security control in information security?

Questions 91–100
Question 91

Which of the following is an appropriate description concerning the activation function in a neural network that is used in AI?

Question 92

Which of the following is an appropriate description concerning e-mail?

Question 93

Which of the following is an appropriate example of applying the concept of foolproof?

Question 94

Which of the following is an appropriate description concerning the information security policy in ISMS?

Question 95

Among the descriptions concerning confidentiality, integrity, and availability in information security, which of the following lists all and only the examples in which integrity was not ensured?

AAn operator entered incorrect data, and inconsistencies arose in the customer list.BA shopping site was temporarily unavailable because of a system failure.CPersonal information of customers that was managed in a database was leaked.
Question 96

Same question on ITPEC: Oct 2025 Q4

Which of the following is the appropriate description concerning the prefix of the International System of Units (SI) that is used to indicate CPU clock frequency, communication speed, and other such things?

Question 97

Which of the following is an appropriate role of a subnet mask?

Question 98

Same question on ITPEC: Apr 2024 Q23

Which of the following is the appropriate description concerning a smart meter that is an IoT device?

Question 99

Same question on ITPEC: Oct 2024 Q35

Which of the following is the appropriate example of biometric authentication?

Question 100

Which of the following is the join operation in a relational database?

LearnIPA
Review
History
Profile