Questions IPA Japan published in 令和5年度 ITパスポート試験 公開問題, translated into English, with IPA's answers. ITPEC is based on the same exams, so they are good practice for ITPEC too.
Same question on ITPEC: Oct 2024 Q85
Which of the following is a technique that increases the potential for success in the development of a new business model or product, by creating the minimum service or product on the basis of a hypothesis, and performing repeated verification of customer value in a short interval of times?
Among A through C below, which of the following lists all and only those that correspond to works as defined by the Copyright Act?
Which of the following is the most appropriate term that represents the economic effect that foreigners who visit Japan for sightseeing and other purposes bring to the country?
The profitability of the ASP usage method and the in-house center usage method with in-house development (hereinafter referred to as the “in-house method”) is compared. Under the conditions below, the expected profit (benefit amount − cost) of the ASP usage method becomes larger than that of the in-house method when the initial investment amount of the in-house method exceeds how much, in 10,000 yen? Here, the comparison period is 5 years.
~ [Conditions] (amounts in 10,000 yen)
~ • | For both methods, the benefit amount from using the system is 500/year.
~ • | For the ASP usage method, the initial cost is 0, and the usage fee is 300/year.
~ • | For the in-house method, the initial investment amount is depreciated by the straight-line method, and the residual book value after 5 years is 0. In addition, the operating cost is 100/year.
~ • | Interest and other costs are not considered.
Same question on ITPEC: Oct 2024 Q93
Which of the following is the most appropriate utilization of RPA for a company?
Company A acquires data consisting of many items, such as customer behavior, the weather, and the locations of stores. It is considering explaining changes in sales quantity by analyzing these data. In doing so, it wants to narrow down the parameters used for the explanation to as few as possible. Which of the following is the most appropriate analysis method to be used in this case?
Same question on ITPEC: Apr 2024 Q71
Which of the following is most appropriate as the person with responsibility for an information systems strategy that is created on the basis of a business strategy?
Same question on ITPEC: Apr 2024 Q84
With the purpose of increasing the number of contracts concluded, salespersons in Company A’s sales department began an activity to make proposals for plans to customers. A key goal indicator (KGI) and key performance indicator (KPI) are to be set as indexes for achievement of sales activities. Which of the following is the most appropriate combination of KGI and KPI in this activity?
Which of the following lists all and only the appropriate purposes of establishing a social media policy?
Same question on ITPEC: Apr 2024 Q99
Which of the following is the most appropriate word to indicate the use of IoT, AI, and other IT in order to strategically overhaul a business model and produce new added value?
Which of the following lists all and only the examples of services that are realized by a contactless IC chip built into a smartphone and an external RFID reader?
Same question on ITPEC: Oct 2025 Q72
The sales and the costs for a certain product for this month are as shown in the table below. When the unit sales price is changed from 1,000 yen to 800 yen, in order to avoid making a loss, at least how many units need to be sold each month? Here, the fixed cost and the variable cost per unit of the product do not change.
Which of the following lists all and only the appropriate examples of the use of natural language processing, which is one of the fields of utilization of AI?
Among the inappropriate acts A through D related to passwords, which of the following lists all and only the acts that are regulated by the Act on the Prohibition of Unauthorized Computer Access?
Same question on ITPEC: Oct 2024 Q86
In call handling at a call center, which of the following is the most appropriate example of the use of AI to implement a more effective FAQ system?
With the advance of IT and the expansion of related services, it has become possible to use various data and tools in a company’s own business and daily work. Which of the following is the most appropriate term that represents the ability to appropriately utilize such data and tools for purposes such as problem solving?
Same question on ITPEC: Oct 2024 Q75
Concerning the EU’s General Data Protection Rules (GDPR), which of the following lists all and only the appropriate descriptions?
There is a mechanism in which communication equipment built into a beverage vending machine installed in a residential area and a computer that monitors the vending machine remotely send and receive data via a network, so that inventory management is realized. Like this, which of the following is a mechanism in which machines exchange information with each other via a network, so that advanced control and operation are performed autonomously?
Same question on ITPEC: Apr 2024 Q72
Which of the following is an index that indicates the efficiency of capital utilization?
Which of the following corresponds to a prepaid payment instrument under the Payment Services Act?
Which of the following is the modeling technique and notation for business processes that is maintained by the OMG (Object Management Group) and standardized as the international standard ISO/IEC 19510?
When the demand is stable throughout the year, which of the following is the most appropriate description concerning the fixed-quantity ordering system?
Same question on ITPEC: Oct 2024 Q76
Among company’s actions A through C below, which of the following lists all and only the acts that may be problematic in terms of compliance?
Company A, an assembly manufacturer that also sells its products, has decided to introduce the kanban system as a strategy for improving management efficiency, in order to reduce its parts inventory to the absolute minimum. Which of the following is the most appropriate information system that Company A links online with its inventory management system to realize this strategy?
Here, Company A also manages its parts inventory with the inventory management system. In addition, it is assumed that currently no other system is linked with the inventory management system.
Family restaurant chain A has decided to analyze the relationship among three (3) elements for each restaurant, namely the number of seats, the average spend per customer, and the sales, in order to examine its restaurant operation strategy. Which of the following is the most appropriate chart to be used when the three (3) elements of each restaurant are visualized for all restaurants in one (1) chart?
Company A, a venture company that develops AI, is going to be listed on a financial instruments exchange for the first time for the purpose of raising funds. Which of the following is the most appropriate term that represents newly offering a company’s unlisted shares to the public in this way?
Which of the following is the law that regulates the act of selling programs that disable the copy protection of video software without a justifiable reason, in order to prevent unfair sales practices?
Same question on ITPEC: Apr 2024 Q92
Which of the following is the most appropriate term to express the initiatives that are implemented by a financial institution or other such institution in order to prevent acts where funds obtained illegally are disguised as being obtained by legitimate means?
Which of the following is the most appropriate term to express a mechanism that expands business through means such as mutually using data and software via published interfaces that link the systems of various companies, and creating new services while promoting collaboration with those companies?
Same question on ITPEC: Apr 2024 Q100
Which of the following is the most appropriate explanation of an RFP that is created by a company, government organization, or other such organization that is planning the introduction of a new system?
To produce one (1) unit of product A, two (2) units of part a and one (1) unit of part b are required. Part a is a purchased part with an order quantity of 150 units per order and a procurement period of 1 week, and part b is a purchased part with an order quantity of 100 units per order and a procurement period of 2 weeks. When the 6-week production plan for product A and the on-hand inventory quantities of part a and part b in week 1 are as shown in the table, in which week at the latest do the parts need to be ordered? Here, the ordering and delivery of parts are each performed at the beginning of a week, and delivered parts can be used for production immediately.
Among the descriptions A through C, which of the following lists all and only those that are stated in the “Social Principles of Human-Centric AI” as matters that society should keep in mind in order for AI to be accepted by society and used appropriately?
Same question on ITPEC: Oct 2024 Q97
Which of the following is the most appropriate description of the Fourth Industrial Revolution?
Same question on ITPEC: Apr 2026 Q62
Which of the following is the most appropriate description concerning business improvement for a service desk?
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning the code of conduct of system auditors?
For a system auditor, independence in terms of A, such as not belonging to the same chain of command as the organization subject to audit, needs to be ensured. In addition, a system auditor is required to have the mental attitude of making fair judgments from B standpoint.
Which of the following is an appropriate diagram that shows the relationship between the number of program steps and the number of defects of multiple similar projects in order to examine the quality targets of a system development project?
Since there is no specification for software in operation, the source code was analyzed and a specification of the program was created. What is this method called?
Same question on ITPEC: Oct 2025 Q50
Which of the following is the most appropriate description concerning DevOps in software development?
As a result of performing activities based on the following arrow diagram, activity D was delayed by 2 days, and activity F was completed 3 days ahead of schedule. How much did the number of days required for the entire set of activities change compared with the plan?
Same question on ITPEC: Oct 2024 Q46
In software development, which of the following is the appropriate combination of the descriptions A through C concerning testing and testing processes?
Same question on ITPEC: Apr 2024 Q49
Among the descriptions A through D concerning software installation, which of the following lists all and only the appropriate descriptions?
The IT department of Company A is considering extending the support hours to 24 hours in order to improve the service availability of the help desk. Company B, which has been entrusted with the help desk operations by Company A, proposed that, to achieve this, it would introduce and use a chatbot at Company B so that the late-night hours are covered by automatic responses, and Company A agreed to this because 24-hour support would be possible. Which of the following is the most appropriate document to be used for this agreement?
In project management, it is required to balance competing constraints such as schedule, cost, and quality. Which of the following is an appropriate response when it has been decided to shorten the planned development schedule?
Indicators concerning IT services include MTBSI (Mean Time Between Service Incidents), which is the mean time between occurrences of incidents that make an IT service unavailable, and it represents how unlikely service interruptions are to occur. Which of the following is the most appropriate example of improving the MTBSI in an IT service?
Same question on ITPEC: Apr 2025 Q62
Which of the following is the appropriate combination of IT service management and the content of the SLA for a hosting service A through C below?
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning the preparation of the system environment?
There is A as a concept by which companies, etc. keep resources such as buildings and facilities, which make up the system environment, in the best condition. Measures for preparing the system environment based on that concept include the deployment of B, a device that supplies power to servers for a certain period of time when a sudden power outage occurs.
Same question on ITPEC: Oct 2024 Q50
Which of the following is the appropriate explanation of refactoring?
In internal control, which of the following is the most appropriate example concerning segregation of duties for the purpose of preventing fraud?
In IT service management, the contents of past incidents were compiled into a database as FAQ. Among the descriptions A through C concerning the items that can be expected to be improved by this, which of the following lists all and only the appropriate ones?
Same question on ITPEC: Apr 2025 Q65
Which of the following is the most appropriate objective of an accounting audit?
When the activities that a company carries out so that IT is utilized appropriately are divided into activities that decide rules and activities that act in accordance with the rules, which of the following corresponds to an activity that decides rules?
Same question on ITPEC: Oct 2024 Q51
Among the descriptions A through D below concerning project management in system development, which of the following lists all and only the failures in scope management?
Same question on ITPEC: Oct 2024 Q52
For software development work, a plan is created to complete it with 10 people in a period of 15 days. However, it became known that only eight (8) members of staff could be obtained for the first five (5) days. In order to complete the work in 15 days as planned, how many staff members are required from the 6-th day? Here, the productivity of each member of staff is the same.
Which of the following is an appropriate description concerning ISMS cloud security certification?
Among security measures in IoT devices, which of the following is an appropriate measure that gives tamper resistance?
Which of the following is an attack in which unauthorized software is planted on a website or other such place, and when the site is accessed from the web browser of a PC, smartphone, or other such device, malware is sent in by exploiting a vulnerability of the web browser or other such software without the user noticing?
A “Member_management” table that is managed in a relational database was normalized and divided into a “Store” table, a “Member_type” table, and a “Member” table. Which of the following is appropriate as the “Member” table? Here, an underline in a table indicates a primary key, and when one member registers with multiple stores, a member number is assigned for each store.
Member_management
Store
Member_type
The procedure printArray sorts the elements of the array integerArray and outputs them. Which of the following is the output when the procedure printArray is called? Here, the array index starts at 1.
What is a measure called that is regarded as a basic principle in the design, construction, and operation of IoT systems and other such systems, and ensures information security from the planning and design stages of the system?
Authentication factors in information security can be classified into three (3) types. Which of the following is the appropriate set of the three (3) types of authentication factors?
When RAID0 and RAID1 are configured by using two (2) HDDs with a capacity of 500 GB, which of the following is the appropriate combination of the storage capacities that can actually be used?
The function sigma receives a positive integer as the argument max, and returns the sum of the integers from 1 to max as the return value. Which of the following is the appropriate piece of code to be inserted into A in the program?
Which of the following is an appropriate description of the PSK that is set when a PC is connected to a wireless LAN router by using WPA2, a security standard for Wi-Fi?
Same question on ITPEC: Apr 2026 Q29 +1 more
Which of the following is the appropriate explanation of commit in transaction processing?
Which of the following is an appropriate role of an IDS that is used in a network environment?
Same question on ITPEC: Apr 2026 Q33
On computers on the Internet, a range of application programs such as web and e-mail run, and a communications protocol in the application layer that corresponds to each application program is used. Which of the following is a communications protocol that is in a lower layer than these communications protocols, and is commonly used to implement basic communications functions?
Which of the following is an appropriate description concerning search algorithms when data stored in an array is searched?
Same question on ITPEC: Apr 2024 Q16
In a web service and other services, in order to increase reliability and process a large volume of accesses from users, which of the following is a technique that links multiple computers and makes them work as if they were a single computer?
Same question on ITPEC: Oct 2025 Q34
Which of the following is the most appropriate description of edge computing in an IoT system?
Same question on ITPEC: Apr 2025 Q44
When risk treatment in risk management for information security is divided into the four (4) categories of risk avoidance, risk sharing, risk mitigation, and risk retention, which of the following is the appropriate explanation of risk sharing?
Same question on ITPEC: Apr 2024 Q45
When an attacker makes an unauthorized intrusion into a computer, the attacker sometimes changes a program or settings in the computer in order to make further intrusions into the computer easier. Which of the following is the most appropriate term to express the method used by the attacker for further intrusions into the computer?
Same question on ITPEC: Oct 2024 Q17
It is determined whether an examinee passed or failed by evaluating the score for two (2) subjects X and Y with a spreadsheet software program. The score of each subject is entered in cells A2 and B2 of the worksheet. When passing criteria (1) or (2) is met, “Pass” is displayed in cell C2, and otherwise, “Fail” is displayed. Which of the following is the expression that is entered in cell C2?
Same question on ITPEC: Apr 2025 Q3
The automation of the inspections performed by a quality controller is considered. By providing as training data 10,000 product images and the results of judgments by the quality controller about whether each product is defective or not, a machine learning model is created to judge whether a product is defective or not. The results of a test judgement by a machine learning model on 100 product images are as shown in the table. When the ratio of the number of images that product is judged to be defective by the machine learning model out of the images that product is judged to be defective by the quality controller is deemed to be the recall rate, what is the recall rate in this test judgement?
The results of an examination in four (4) subjects taken by 10,000 examinees are as shown in the table, and it is assumed that the score distribution of every subject follows a normal distribution. When the scores of an examinee in the four subjects were all 71 points, which of the following is the subject in which this examinee obtained the highest deviation value?
Unit: Points
Which of the following lists all and only the appropriate descriptions concerning the setting of a primary key in a relational database?
In the activities of an organization that operates an ISMS on the basis of the PDCA model, the following investigation report was made. In which process of the PDCA model is this investigation performed?
Concerning the receipt of e-mail from outside the company, a malware detection system has been introduced in accordance with the information security policy and is maintained and operated, and it achieves the effect of detecting and discarding dozens of received e-mails with malware attached every day. However, there are no rules or clear operating procedures for security measures concerning the sending of e-mail outside the company, and there is a risk that an incident such as the mistaken sending of an e-mail with company-confidential material attached to an address outside the company may occur.
Same question on ITPEC: Oct 2024 Q10
When USB memory or other such external recordable media is connected to a PC, which of the following is an OS function that automatically executes programs or plays movies on the media and can also cause malware infection?
When an HDD is disposed of, which of the following lists all and only the appropriate measures for preventing information leakage from the HDD?
Same question on ITPEC: Oct 2024 Q18
Among the descriptions A through C below concerning Open Source Software (OSS), which of the following is the list that contains all and only the appropriate descriptions?
Same question on ITPEC: Apr 2025 Q34
Which of the following is a technology that is used to make voice calls over the Internet by two (2) parties using the same application on their smartphones or other devices?
Which of the following is an appropriate description concerning an e-mail to which the sender’s digital signature that uses a message digest is attached?
Same question on ITPEC: Apr 2026 Q21 +1 more
Which of the following is a technology that is also used in measures against tampering of software in IoT devices and verifies the digital signature of the OS, firmware, or other such software when it is started, and only executes the software if the verification is successful?
A message is to be sent by using a hybrid encryption method. In the figure that shows the procedure for encrypting the message and the key for decryption, when the key used for encrypting the message is (1) and the key used for encrypting (1) is (2), which of the following is the appropriate combination of words to be inserted into A and B in the figure?
Which of the following is a technology that is also used in IoT area networks and that uses power lines also as a transmission path by superimposing high-frequency communication signals on the power lines that supply electricity and transmitting them?
Which of the following is an attack that does not use technical methods, such as impersonating an employee of a company to obtain an ID or a password, or obtaining confidential information from a wastebasket?
Which of the following is an appropriate example of implementing in the workplace a clear desk, which is a physical and environmental security control in information security?
Which of the following is an appropriate description concerning the activation function in a neural network that is used in AI?
Which of the following is an appropriate description concerning the information security policy in ISMS?
Among the descriptions concerning confidentiality, integrity, and availability in information security, which of the following lists all and only the examples in which integrity was not ensured?
Same question on ITPEC: Oct 2025 Q4
Which of the following is the appropriate description concerning the prefix of the International System of Units (SI) that is used to indicate CPU clock frequency, communication speed, and other such things?
Same question on ITPEC: Apr 2024 Q23
Which of the following is the appropriate description concerning a smart meter that is an IoT device?
Same question on ITPEC: Oct 2024 Q35
Which of the following is the appropriate example of biometric authentication?