IPA IP 2024 Questions and Answers

IPA IP 2024

Questions IPA Japan published in 令和6年度 ITパスポート試験公開問題, translated into English, with IPA's answers. ITPEC is based on the same exams, so they are good practice for ITPEC too.

Question 1

Which of the following is the most appropriate description concerning marketing automation (MA)?

a)A large volume of data accumulated within a company is analyzed and put to effective use in business strategy and other areas.b)In the retail and service industries, information is collected, accumulated, and analyzed in units of the products sold.c)Routine tasks that humans have so far performed manually are automated and streamlined by having software robots that incorporate AI, machine learning, and other such technologies perform them in their place.d)Sales activities such as the identification, acquisition, and nurturing of prospective customers are made more efficient.

Question 2

Which of the following is the law that establishes basic principles for systematically taking defensive measures across the entire nation against acts such as illegally intruding into an information system and stopping services to cause social disruption, and clarifies the responsibilities of the national government and others?

a)Whistleblower Protection Actb)Basic Act on Cybersecurityc)Act on the Prohibition of Unauthorized Computer Accessd)Provider Liability Limitation Act

Question 3

Which of the following is the most appropriate term that represents a method of setting a goal at a certain point in the future, looking back on the present with that point as the starting point, and considering what should be done now in order to achieve the goal?

a)PoC (Proof of Concept)b)PoV (Proof of Value)c)Backcastingd)Forecasting

Question 4

Same question on ITPEC: Apr 2026 Q92

Conventional financial information systems were highly robust, but they lacked flexibility and it was difficult to swiftly provide services that keep up with mobile technology and other such innovations in information. Based on this, which of the following is the most appropriate term for the trend of providing new value and innovative services through the incorporation of Internet-related technologies, the collaboration with venture companies that utilize them, and other such actions?

a)Omnichannelb)Fintechc)Blockchaind)One-to-one marketing

Question 5

Which of the following is the most appropriate description concerning venture capital?

a)A technique of establishing a jointly funded company with other companies for purposes such as acquiring new technologies and pursuing economies of scaleb)A company that provides investment and other support to companies that are trying to enter the market armed with new products or services, for purposes such as gaining profits through the sale of sharesc)A technique of forming co-creation relationships with external organizations such as the national government, academic institutions, and other companies, actively exchanging technologies and resources, and incorporating them into the company, for the purpose of creating new services, technological innovations, and the liked)An organization that is set up within a company for a fixed period for the purpose of solving a specified issue, whose members are gathered from related departments, and that is dissolved when the purpose is achieved

Question 6

Same question on ITPEC: Apr 2025 Q72

Which of the following is a role that has direct responsibility for technology management, such as the creation of a technology strategy and the promotion of technology development?

a)CEOb)CFOc)COOd)CTO

Question 7

Same question on ITPEC: Oct 2025 Q96

In the upstream processes of system development, which of the following is the most appropriate objective of performing business process modelling?

a)To analyze a large volume of data that is handled in a business process by using statistical techniques and AI techniques, and discover correlations between data and hidden patterns, etc.b)To visualize a business process in order to establish the information that will form the base of appropriate system design and enable the sharing of interpretations between partiesc)To share the knowledge, experience, and know-how of work of each individual employee within the whole company, and produce creative ideasd)To procure the required staff members for a project and organize them as a team, and to have them work together toward the achievement of the objective of the project

Question 8

Same question on ITPEC: Apr 2026 Q72

The table is an excerpt from an income statement at the end of a year for Company A. When the net income for the year is 800 million yen, how much are the selling, general, and administrative expenses in millions of yen?

Unit: Million yen

Net sales	8,000
Cost of goods sold	6,000
Selling, general, and administrative expenses	blank
Non-operating income	150
Non-operating expenses	50
Extraordinary income	60
Extraordinary loss	10
Income taxes	350

a)850b)900c)1,000d)1,200

Question 9

Which of the following is the most appropriate description concerning Fermi estimation, which is used in corporate strategy planning, marketing, and other areas?

a)It is a technique of obtaining an approximate number for a quantity that is extremely difficult to calculate accurately, by using the information at hand and a logical thinking process.b)It is a technique of inferring customs, tastes, and the culture surrounding a region or organization by sharing activities with a specific group or observing the behavior of people.c)It is a technique of statistically estimating the causal relationship between input data and output data from those data.d)It is a technique of obtaining a consensus on future forecasts in a certain field by repeatedly conducting the same questionnaire survey on a group of experts and feeding back its results.

Question 10

Which of the following is the most appropriate description concerning shared data with limited access as specified in the Unfair Competition Prevention Act?

a)Technical or business information that is stored on the premise that it is provided to a specific third party only once is shared data with limited access.b)Technical or business information that is accumulated in a significant amount and managed by electromagnetic means as information to be provided to specific third parties (excluding information that is managed as a secret) is shared data with limited access.c)Technical or business information that is physically managed in a safe or the like in order to be provided to specific third parties is shared data with limited access.d)A trade secret as defined in the Unfair Competition Prevention Act is shared data with limited access.

Questions 11–20

Question 11

Which of the following is an appropriate measure aimed at standardizing the operational management of organizations and processes related to quality, and improving the quality and efficiency of management?

a)Introduction of ISMSb)Introduction of ISO 9001c)Introduction of ITILd)Acquisition of the PrivacyMark

Question 12

Among the seven “AI Social Principles” specified in the “Social Principles of Human-Centric AI,” one of the guidelines concerning AI, which of the following is the most appropriate description concerning the “Principle of Innovation”?

a)So that people also evolve together with the development of AI, internationalization and diversification are pushed forward, and collaboration between the public and private sectors, such as universities, research institutions, and companies, and the flexible movement of human resources are promoted.b)As for the results brought about by the use of AI, the parties involved in the development, provision, and use of AI share and bear responsibility according to the characteristics of the problem.c)Service providers give users an appropriate explanation of the fact that AI is used, the methods of obtaining and using data, and the appropriateness of the results.d)In order not to create information-disadvantaged people, education on the use of AI and information literacy is given in early childhood education and in primary and secondary education.

Question 13

At financial institutions, for individuals and corporations that are the same customer and hold multiple accounts, work is performed to aggregate the accounts by using clues such as the name or corporate name, the date of birth or date of establishment, the telephone number, and the address or location, and to grasp accurately the total amount of deposits for each customer. Which of the following is the most appropriate term that represents the procedure of putting together the multiple accounts held by a customer in this way for each customer and managing them centrally?

a)Account aggregationb)Key mappingc)Vertical integrationd)Name-based aggregation

Question 14

When the relationship between the sales volume of a certain product and the temperature can be approximated by a linear equation, which of the following is an appropriate method for estimating the sales volume of the product from a forecast temperature?

a)Regression analysisb)Linear programmingc)Delphi methodd)Pareto analysis

Question 15

Same question on ITPEC: Oct 2025 Q91

Which of the following is the production system that minimizes the inventory between processes through the procurement of raw materials and components at the required timing and in the required quantity?

a)BPOb)CIMc)JITd)OEM

Question 16

Which of the following is the most appropriate work to which RPA can be applied?

a)Work in which a game software vendor automatically improves the programs of game softwareb)In the settlement of employees’ transportation expenses, work of creating settlement slips from the information on the sections of transportation used and receipt datac)At a food processing factory, work of automatically manufacturing frozen foods by using industrial robotsd)In the mail-order business, work of finding new rules about customers’ purchasing behavior from an enormous amount of customers’ purchase data

Question 17

Which of the following describes a roadmap that is created in a technology development strategy?

a)On a matrix whose two (2) axes are the competitive level of technologies and the life cycle of technologies, the company’s own technologies and new technologies are plotted.b)On coordinates whose two (2) axes are the investment in research and development and its results, the growth process of a technology is graphed, and the state of the transition from an old technology to a new technology is shown.c)On a matrix whose two (2) axes are the degree of promise from the market side and the degree of promise from the technology side, technology development projects are plotted.d)Time is shown on the horizontal axis, and markets, products, technologies, and so on are shown on the vertical axis, and the direction of the commercialization and business development of research and development results is represented by the relationships among these elements.

Question 18

Same question on ITPEC: Apr 2025 Q77

Which of the following is the most appropriate example of enhanced corporate governance?

a)Enhancing the labor system in order to empower womenb)Purchasing another company in order to swiftly deploy businessc)Increasing the number of highly-independent outside directorsd)Withdrawing from a business where it is hard to obtain profit

Question 19

Same question on ITPEC: Apr 2025 Q85

A certain bank makes the deployment of highly convenient and advanced services easier by publishing the interface specifications for its systems and permitting access from external parties who have concluded a contract in advance. Which of the following is the most appropriate term to express this initiative?

a)BPOb)RPAc)Open APId)Technology management

Question 20

Same question on ITPEC: Apr 2026 Q100

Company A is investigating the investment of 10 million yen in the rebuilding of a sales support system. When the current operation costs for the system are 5 million yen per year, the operation costs for the system after the rebuilding are 4 million per year, and new profit from the reconstruction is 2 million yen per year, how many years is the payback period for investment? Here, no other effects or costs are considered, and the result of calculation is rounded off to one (1) decimal place.

a)2.5b)3.3c)5.0d)10.0

Questions 21–30

Question 21

Same question on ITPEC: Apr 2025 Q78

A piece of software is provided in a form that enables use at a set fee or for a certain period of time. Which of the following is the most appropriate term to express this form of use?

a)Activationb)Adwarec)Subscriptiond)Volume license

Question 22

Which of the following is the most appropriate term that represents a service or mechanism that mediates, via the Internet, the lending of idle assets such as residences that are owned by individuals or companies?

a)Shared servicesb)Sharewarec)Sharing economyd)Work-sharing

Question 23

When introducing RPA software for the first time, Company A plans to proceed in three (3) stages: the planning phase, the pilot introduction phase, and the full-scale introduction phase. Among the following, which of the following lists all and only the appropriate tasks to be performed in the planning phase?

AA proof of concept is conducted to assess the applicability of the RPA software.BProcedure manuals for the introduction and operation are created in order to roll out the RPA software company-wide.CThe RPA software is introduced in a narrowed-down range of departments and business operations, and its effects are actually measured.

a)Ab)A, Cc)Bd)B, C

Question 24

The formula is a calculation formula for obtaining the order quantity of raw materials in the fixed-period ordering system. Which of the following is the appropriate combination of words and phrases to be inserted into A through C?

Order quantity = (A + procurement period) × planned daily usage + B

− current inventory − C

ABC

a)Number of business daysSafety stockCurrent outstanding ordersb)Number of business daysCurrent outstanding ordersSafety stockc)Ordering intervalSafety stockCurrent outstanding ordersd)Ordering intervalCurrent outstanding ordersSafety stock

Question 25

Same question on ITPEC: Apr 2025 Q92

As sightseeing guidance, images of buildings from the past and explanatory information are displayed on top of the current actual scenery when a smartphone is pointed at a historic site or other such site. Which of the following is the most appropriate term to describe the mechanism that is utilized?

a)ARb)GUIc)VRd)Metaverse

Question 26

Which of the following is the most appropriate description concerning the role of a data scientist?

a)New knowledge to be utilized in business is acquired by analyzing big data with techniques such as machine learning and statistics.b)A system infrastructure for operating a high-performance database is built so that the enormous volume of data held by a company can be searched at high speed.c)In order to evaluate the risks related to the information systems in a company, the actual state of the handling and management of data at the workplace is investigated.d)The planning, design, development, and operation of secure information systems in companies and organizations are supported by making use of specialized knowledge and skills concerning cybersecurity.

Question 27

The Act on the Protection of Personal Information stipulates acts by which personal data may be provided even without obtaining the consent of the person in advance. Which of the following lists all and only the cases that correspond to these acts?

AHaving seen the employee ID card that a person who was unconscious due to an accident was carrying, the hospital to which the person was taken called the person’s company, so the person in charge of general affairs gave the person’s home telephone number.BHaving been asked by an employee of an insurance company who wanted to solicit new subscribers, the person in charge of general affairs handed over a list of the names and departments of new employees.CIn response to a request based on laws and regulations from an investigative agency that is promoting measures to prevent similar crimes, the person in charge of general affairs provided personal information about victims of financial crimes such as fraudulent remittances.

a)Ab)A, Cc)B, Cd)C

Question 28

Among the following case examples, which of the following lists all and only those in which the work efficiency of business operations was improved by introducing AI?

ACompany A, a specialized food trading company, reduced the time for clerical work by automatically reading the characters written on handwritten invoices whose format differs for each business partner, and converting them into data.BCompany B, a textile manufacturing company, introduced a tool that automates the routine PC operations for ordering raw materials from business partners, and reduced the staff of the administrative department.CCompany C, a non-life insurance company, shortened the time that operators spend handling inquiries to its call center by having a voice chatbot ask about the inquiries before they are connected to an operator.DCompany D, a logistics company, reduced misdeliveries by attaching an electronic tag to each package to be delivered, writing the delivery destination to the electronic tag at the time of shipment, and checking it at the time of delivery.

a)A, Cb)B, Cc)B, Dd)C, D

Question 29

Same question on ITPEC: Apr 2025 Q100

Which of the following is the most appropriate term to express the change where by using digital technology, a company creates a user experience (UX) and a business model that attract customers, expels conventional services in the industry, and as a result destroys the existing structure of an industry?

a)Digital signageb)Digital disruptionc)Digital divided)Digital transformation

Question 30

Your superior handed you the company’s income statement for the current period and said, “Analyze the profitability of our company.” Among the management indicators, which of the following lists all and only those that can be calculated from this income statement alone?

ASales growth rateBRatio of profit to net salesCReturn on equity

a)Ab)A, Bc)A, B, Cd)B

Questions 31–40

Question 31

Unlike systems such as SNS that frequently update information with an awareness of individual connections with customers, which of the following is the most appropriate term that indicates the concept of a system that handles internal information requiring high reliability and stable operation, such as an accounting system?

a)IoT (Internet of Things)b)PoC (Proof of Concept)c)SoE (Systems of Engagement)d)SoR (Systems of Record)

Question 32

Which of the following is an appropriate description concerning the employment relationship of a dispatched worker in worker dispatching?

a)There is an employment relationship with the client company, and there is none with the dispatching company.b)There is an employment relationship with the dispatching company, and there is none with the client company.c)There is an employment relationship with both the dispatching company and the client company.d)There is no employment relationship with either the dispatching company or the client company.

Question 33

Among the descriptions below, which of the following lists all and only the problems that can occur because the business requirements definition is ambiguous?

AIn the planning process, the computerization concept cannot be put together, and approval for computerization cannot be obtained.BBecause of coding errors, the system behaves differently from what was intended.CRework due to specification changes occurs frequently during the development of the system.DAn appropriate acceptance test for accepting the system cannot be designed.

a)A, Bb)B, Cc)B, Dd)C, D

Question 34

A company wants to build a mechanism that builds good long-term relationships with customers by providing attentive responses according to the characteristics of each customer, leading to improved customer satisfaction and the continuation of business relationships. As one of the components of that mechanism, it has decided to introduce a system that accumulates attribute information about customers obtained in sales activities, the history of negotiations with customers, and other such information, and that enables them to be shared within the company. Which of the following is the most appropriate system that can achieve this purpose?

a)CAE systemb)MRP systemc)SCM systemd)SFA system

Question 35

Which of the following is the most appropriate description concerning a utility model?

a)A manufacturing method that has never existed before is eligible for a utility model.b)Only creations of technical ideas utilizing the laws of nature that are highly advanced are eligible for a utility model.c)Only those that have passed an examination of novelty are registered as utility models.d)A new product devised by combining multiple articles is eligible for a utility model.

Question 36

Which of the following lists all and only the appropriate examples that correspond to a project?

ATransition to a new organization following a company mergerBOperation of a service desk that accepts inquiries and defects concerning internal systemsCProgram development for introducing a new accounting systemDAccounting processing carried out at the end of every fiscal year

a)A, Cb)B, Cc)B, Dd)C

Question 37

Which of the following is the most appropriate activity performed in project integration management when a system development project is closed?

a)The difference between the planned and actual progress of the processes is analyzed.b)The list of all the deliverables created is checked.c)The difference between the budget and the actual total cost is analyzed.d)Knowledge and lessons learned are registered as assets of the organization.

Question 38

In the operation of a system, an SLA was concluded with the users, and it was agreed that the available days are Monday through Friday, the available hours in a day are from 7:00 to 22:00, and the availability is 98% or more. In one (1) week of operation, what is the maximum number of hours for which a stop of the system due to failures, etc. can be allowed?

a)0.3b)1.5c)1.8d)2.1

Question 39

In order to evaluate a service desk, it is necessary to define and evaluate appropriate KPIs. Which of the following lists all and only the appropriate KPIs whose smaller values are better in order to increase customer satisfaction?

AThe percentage of the number of incidents whose handling was completed within the target time agreed in the SLABThe percentage of the number of incidents that could be resolved with one (1) inquiryCThe percentage of the number of incidents escalated to secondary supportDThe time spent by a user until being connected to a person in charge at the service desk

a)A, Bb)A, Dc)B, Cd)C, D

Question 40

Which of the following is the most appropriate description concerning agile development?

a)The functions to be developed are divided into small units, and development and release are repeated in short periods, starting from those with high priority.b)The Common Frame is applied to define the names of processes, such as requirements definition and design, and the documents to be created.c)System development proceeds in order from the upstream processes to the downstream processes, and the system is released after all the development processes are completed.d)A prototype is created and users are asked to check it, and the development proceeds while users perform evaluation and give feedback.

Questions 41–50

Question 41

The relationships between the activities of a project and their required times are shown in an arrow diagram. Among the four (4) nodes B through E in this arrow diagram, which of the following is the node at which the start of all the activities that begin from that node can be delayed the most without affecting the completion time of the entire process? Here, an activity that begins from a node cannot start until all the activities that lead to that node are completed, and the setup time from one activity to the next activity is not considered.

a)Bb)Cc)Dd)E

Question 42

Which of the following lists all and only the appropriate roles of a system auditor?

AAn audit plan is formulated concerning the types of audit procedures, the timing of their implementation, the scope of their application, etc.BAn audit report that suits the purpose of the audit is prepared and disclosed within the company.CThe department being audited is instructed to implement improvements on the basis of the improvement proposals in the audit report.DThe status of implementation of improvements based on the improvement proposals in the audit report is monitored.

a)A, Bb)A, Dc)B, Cd)C, D

Question 43

Among the risk measures that are taken to maintain and protect the facilities and equipment related to information systems, which of the following lists all and only the appropriate measures that are taken from the viewpoint of facility management?

AEntry into the computer room is restricted to authorized persons only.BSigns that indicate the installation location of the computers are not displayed.CAnti-malware software is installed on users’ PCs.

a)Ab)A, Bc)A, Cd)B, C

Question 44

Which of the following is the most appropriate activity that appropriately combines people, processes, and information technology, and manages them while continuously improving them, so that the IT systems being provided can meet the needs of the business?

a)IT service managementb)System auditc)Human resource managementd)Facility management

Question 45

Which of the following is the most appropriate document that shows, for each business operation, the procedures for how to use the service, for carrying out business operations after the system goes into production?

a)FAQb)Service level agreementc)System requirements definition documentd)User manual

Question 46

Which of the following is the appropriate combination of the descriptions A through C concerning the management processes of IT service management, and the terms?

AA process for implementing changes to IT servicesBA process for identifying the root cause of incidents and providing solutionsCA process for understanding the IT assets that the organization owns

ABC

a)Configuration managementProblem managementRelease and deployment managementb)Configuration managementRelease and deployment managementProblem managementc)Problem managementRelease and deployment managementConfiguration managementd)Release and deployment managementProblem managementConfiguration management

Question 47

Same question on ITPEC: Apr 2025 Q50

Which of the following is the most appropriate case example of DevOps in software development?

a)The developer prepares a prototype of important functions, and evaluates its adequacy by measuring the performance together with the customer.b)The developer moves on to the next development phase only after it is judged that the current phase is complete, and handovers the system to the operation side only after the system test where users participating in a system test confirm the operability.c)The developer and the operator work in close cooperation and quickly proceed with the implementation and update of functions, etc., by using automation tools and other such tools.d)The programs are added one by one while fixed short-period cycles are repeated in order to expand the functions in the development of a system.

Question 48

Which of the following is the most appropriate description concerning the method of selecting the criteria for judgment that are used in a system audit?

a)In a system audit, all items of the System Management Standards must be used as they are.b)Depending on the theme of the system audit, standards other than the System Management Standards may be used.c)Regardless of the theme of the system audit, standards other than the System Management Standards should not be used.d)In agile development, the System Management Standards should not be used.

Question 49

Cost estimation methods in a software development project include the bottom-up method, the function point method, and the analogous estimation method. Which of the following is the appropriate combination of the methods used in estimation and the descriptions A through C concerning their characteristics?

AThe individual activities required for the project are identified, and the person-hours for each activity are estimated and totaled.BIt is a method used in the initial stage of a project, and the cost is estimated by making use of past cases.CFocusing on data input/output and functions, the software size is estimated, and the cost is estimated by multiplying it by a coefficient, etc.

Bottom-up methodFunction point methodAnalogous estimation method

a)ACBb)BACc)CABd)CBA

Question 50

Same question on ITPEC: Apr 2025 Q49

Which of the following is the most appropriate description concerning the usability of RPA software when the quality characteristics of software are classified into portability, functional suitability, compatibility, usability, reliability, performance efficiency, security, and maintainability?

a)It operates even if the OS of the PC that RPA runs on changes.b)Automatic processing is executed at the time and on the conditions that are specified with RPA.c)Even if the version of the application software that is the subject of operation by RPA is upgraded, RPA will work with a simple change of the settings.d)People who have never used RPA can use it with only simple education.

Questions 51–60

Question 51

In a system development project, it has been decided to perform a defect analysis in order to prevent the recurrence of defects found during testing. The test results and the details of the defects were entered in a table, and after the root cause of each defect was identified, the defects were aggregated by root cause and arranged in descending order of frequency of occurrence, and the main root causes were identified. Among the charts used here, which of the following is the chart in which the root causes are aggregated, arranged in order of frequency of occurrence and shown in a bar graph, and the cumulative values are superimposed on it in a line graph?

a)Scatter diagramb)Check sheetc)Cause and effect diagramd)Pareto chart

Question 52

In a system development project, which of the following is an appropriate activity that is performed in project scope management after a request for the addition of a new function has been approved by the change control board?

a)The WBS is changed in order to develop the new function additionally, and is provided as information for making a detailed estimate of the cost.b)The skills necessary for executing the activities of the WBS for developing the new function additionally are confirmed, and as needed, the capabilities of the project team are improved.c)A schedule is created on the basis of the changed WBS, and the prospect of the completion time is presented.d)On the basis of the changed WBS, the sufficiency of staff members is confirmed, and if necessary, outsourcing of the work is considered.

Question 53

Which of the following is the most appropriate phrase to be inserted into blank A in the following description concerning IT governance?

From the viewpoint of supporting the A objectives of the business, management evaluates the effective, efficient, and acceptable A use of IT.

a)Past and presentb)Presentc)Present and futured)Future

Question 54

Which of the following is the initiative that has compliance with laws and regulations relating to the business activities, etc. as one of its objectives, and is composed of control environment, risk assessment and response, control activities, information and communication, monitoring, and response to IT?

a)CMMIb)ITILc)Internal controld)Risk management

Question 55

Which of the following is an appropriate description concerning the purpose of a system audit?

a)To analyze the specific uses of the system to be developed, and clarify the system requirementsb)To comprehensively plan, manage, and utilize the facilities where information systems are installed and their environmentc)To contribute to the achievement of the goals of the organization by evaluating whether the risks related to information systems are addressed appropriatelyd)To satisfy the requirements of a project by applying knowledge, skills, tools, and techniques to project activities

Question 56

In a PC, which of the following is the memory or storage medium whose stored contents are lost when the power supply is cut off?

a)DVD-RAMb)DRAMc)ROMd)Flash memory

Question 57

Same question on ITPEC: Oct 2025 Q43

Which of the following is the appropriate combination of terms or phrases inserted into A through D in the table that describes the characteristics of encryption methods?

Encryption method	Key characteristics	Safedistribution ofkeys	Encryption/decryptionrelative processingspeed
A	The encryption key and the decryption key are different	Easy	C
B	The encryption key and the decryption key are the same	Difficult	D

ABCD

a)Common key cryptographyPublic key cryptographySlowFastb)Common key cryptographyPublic key cryptographyFastSlowc)Public key cryptographyCommon key cryptographySlowFastd)Public key cryptographyCommon key cryptographyFastSlow

Question 58

Same question on ITPEC: Apr 2025 Q22

In document creation software, spreadsheet software, and other such software, which of the following is a function that predefines and executes a series of operation procedures?

a)Autocompleteb)Source codec)Plug and playd)Macro

Question 59

Same question on ITPEC: Oct 2025 Q23

Which of the following is the appropriate role of OCR?

a)Performing wireless communication between devices that are close together at a distance of approximately 10cmb)Recognizing printed and handwritten characters, and transforming them to text datac)Creating an artificial voice through digital signal processingd)Detecting the position on a panel that was touched by a user’s fingertip, etc.

Question 60

In the diagram that represents the relationship of the elements that make up a relational database, which of the following is the appropriate combination of words to be inserted into A through C in the diagram?

ABC

a)TableFieldRecordb)TableRecordFieldc)FieldTableRecordd)RecordTableField

Questions 61–70

Question 61

Which of the following is an explanation of cookie?

a)A mechanism in which a website writes data onto a visitor’s PC through a Web browser and stores it, or the data that is storedb)A mechanism in which a Web browser temporarily stores an accessed Web page as a file on the hard disk of the PC, or the file that is storedc)An image that is posted on a Web page for the purpose of, for example, introducing a websited)A mechanism, one of the functions of a blog, that notifies the other party to whom a link has been made to that effect

Question 62

The function convert is a program that converts an integer-type array into a string according to a certain rule. When the function convert is called as convert(arrayInput), which of the following is the value of the argument arrayInput for which the return value is “AABAB”? Here, the number of elements in arrayInput is 1 or more, and the array index starts at 1.

[Program]

○ string: convert(integer []: arrayInput)

string: stringOutput ← "" // Store an empty string

integer: i

for (increase i from 1 to the number of elements in arrayInput by 1)

if (arrayInput[i] is equal to 1)

add "A" to the end of stringOutput

else

add "B" to the end of stringOutput

endif

endfor

return stringOutput

a){0, 0, 1, 2, 1}b){0, 1, 2, 1, 1}c){1, 0, 1, 2, 0}d){1, 1, 2, 1, 0}

Question 63

Which of the following is used as a method for erasing all the data on an SSD so that it cannot be restored?

a)Secure Eraseb)Magnetic erasurec)Secure bootd)Data cleansing

Question 64

When the treatment of risks in information security risk management is classified into the four (4) categories of risk sharing, risk avoidance, risk retention, and risk mitigation, which of the following is an appropriate example of risk sharing?

a)A backup center is set up in a remote location in order to shorten the downtime of the system caused by a disaster.b)Cyber insurance is taken out in order to cover the compensation for damages and the losses of incident handling that arise from an information leakage.c)In order to prevent confidential files from being leaked by e-mail, a mechanism is put in place that requires the permission of a superior to send an e-mail with an attached file.d)In order to prevent information leakage due to the loss or theft of a notebook PC, the HDD is encrypted.

Question 65

Which of the following is the appropriate combination of terms to be inserted into blanks A through C in the description below concerning learning methods of machine learning in AI?

Supervised learning is a learning method in which, by inputting training data with correct answers attached, it becomes possible to divide unknown data into multiple classes by a technique called A, and to find relationships in data by a technique called B. Unsupervised learning is a learning method in which, by inputting training data without correct answers attached, it gradually becomes possible to correctly divide data into groups by a technique such as the one called C.

ABC

a)RegressionClassificationClusteringb)ClusteringClassificationRegressionc)ClassificationRegressionClusteringd)ClassificationClusteringRegression

Question 66

Which of the following is an appropriate description concerning the role of a CA (Certificate Authority) in PKI?

a)It is located between the Internet and an internal network, and accesses the Internet on behalf of the computers on the internal network.b)It is located between the Internet and an internal network, and prevents unauthorized access from the Internet to the internal network by using functions such as packet filtering.c)It associates IP addresses with domain names on the basis of the domain name specified by a user, and lets the user access the intended server.d)It issues and revokes public key certificates for users’ public keys, and guarantees the validity of the keys.

Question 67

Same question on ITPEC: Apr 2025 Q16

There is a web system that is composed of two (2) web servers and one (1) database server as shown in the figure. When the availability of each Web server is 0.8 and the availability of the Database server is 0.9, which of the following is the availability of this system rounded off to two (2) decimal places? Here, if at least one (1) of the two (2) Web servers are operating and the Database server is operating, it is considered that the system is operating. Also, a fault occurs randomly on each server.

a)0.04b)0.58c)0.86d)0.96

Question 68

Which of the following is the term for a concept that is used in information design and is a perceivable clue that induces appropriate human behavior, such as the shape of the doorknob of a room suggesting how to open and close the door?

a)NUI (Natural User Interface)b)Wizardc)Signifierd)Multi-touch

Question 69

In preparation for failures, RAID5 is configured by using four (4) HDDs, and the capacity of one (1) HDD is used for recording parity information. When the capacity of one (1) HDD is 1 Tbyte, approximately how many bytes is the effective data capacity?

a)2 Tb)3 Tc)4 Td)5 T

Question 70

Which of the following is an appropriate effect that is obtained by making the ESSID stealth?

a)Communication between the access point and terminals can be encrypted.b)Terminals that connect to the access point can be authenticated.c)The risk of unauthorized connection to the access point can be reduced.d)Terminals can communicate directly with each other without going through the access point.

Questions 71–80

Question 71

Which of the following is an appropriate description of a domain name that is used on the Internet?

a)The name of a communication protocol that is used by applications for web browsing and for sending and receiving e-mailsb)A name for identifying computers, networks, etc.c)A name for identifying an application that performs communicationd)The name of the other party that is specified as the destination of an e-mail

Question 72

Among the descriptions below, which of the following lists all and only the examples of biometric authentication?

AAn image consisting of a string of distorted characters is displayed on a web page, and authentication is performed by having the user enter the character string that the user read.BThe user is made to enter a specific character string on a keyboard, and authentication is performed by the changes in the speed and timing of the keystrokes at that time.CThe user is made to enter his/her name by handwriting on a touch panel, and authentication is performed by the handwriting trail, the pen pressure, the writing speed, etc. at that time.DAuthentication is performed by having the user trace multiple dots that are displayed on a touch panel in a predetermined order.

a)A, Bb)A, Dc)B, Cd)C, D

Question 73

Among the security measures for IoT devices, which of the following is the most appropriate as a countermeasure against social engineering?

a)Communication between an IoT device and a server is always performed by encrypted communication in order to prevent eavesdropping.b)In order to prevent attacks that exploit vulnerabilities of an IoT device, the latest firmware is obtained from the manufacturer of the device, and an update is performed.c)Anti-malware software is installed in order to prevent malware infection of an IoT device.d)When an IoT device is disposed of, it is physically destroyed in order to prevent information leakage from the built-in storage device.

Question 74

Same question on ITPEC: Apr 2025 Q29

Which of the following is the appropriate description concerning transaction processing?

a)Commit is the reversion of a database to the status prior to the start of the transaction when a transaction is not processed successfully.b)Exclusive control is the confirmation of the content of a database when a transaction is processed successfully.c)Rollback ensures that there are no inconsistencies in data when multiple transactions attempt to update data simultaneously.d)Log is a file that records transaction history of a database.

Question 75

Which of the following is the appropriate combination of confidentiality, integrity, and availability, which are the three elements of information security, and the examples A through C of measures for ensuring them?

AAccess controlBDigital signatureCDuplexing of disks

ABC

a)AvailabilityIntegrityConfidentialityb)AvailabilityConfidentialityIntegrityc)IntegrityConfidentialityAvailabilityd)ConfidentialityIntegrityAvailability

Question 76

Which of the following is the method that is widely used in the touch panels of smartphones and other such devices, and that detects the position of a finger when the finger comes close to the surface of the touch panel?

a)Pressure-sensitiveb)Opticalc)Capacitived)Electromagnetic induction

Question 77

In order to avoid using a program file of unknown origin, a user wants to investigate its publisher. Which of the following is the appropriate information to be checked in this case?

a)The access rights of the program fileb)The owner information of the program filec)The digital signature of the program filed)The hash value of the program file

Question 78

Same question on ITPEC: Oct 2025 Q25

When the process for a smart speaker to provide a voice response to the content of a user speaking to a smart speaker is as in (1) through (4), which of the following is the process that corresponds to voice recognition?

(1)The voice of the user is transformed into text data.(2)Text data is analyzed, and the meaning is understood.(3)The content of the response is decided, and text data is created.(4)The created text data is read out.

a)(1)b)(2)c)(3)d)(4)

Question 79

Which of the following is located between an internal network of a company, etc. and the Internet, and accesses web servers on the Internet on behalf of PCs on the internal network in order to ensure security?

a)DNS serverb)NTP serverc)Streaming serverd)Proxy server

Question 80

Same question on ITPEC: Apr 2026 Q22

Among the descriptions below concerning Open Source Software (OSS), which of the following lists all and only the appropriate descriptions?

ASoftware that is created by using OSS can be sold.BAll software with publicly available source code is OSS.CIt is software the copyright of which has been waived.

a)Ab)A, Bc)B, Cd)C

Questions 81–90

Question 81

Order data that was managed in one (1) table is divided into information concerning orders and information concerning products, and is managed in tables of a relational database after normalization is performed. Which of the following is the most appropriate combination of tables as the result of the normalization? Here, when the unit price differs for the same product, the product number also differs. In addition, there are no orderers with the same full name.

Order data

Order number	Orderer name	Product number	Product name	Quantity	Unit price
T0001	Shiken Hanako	M0001	Product 1	5	3,000
T0002	Joho Taro	M0002	Product 2	3	4,000
T0003	Kodo Akiko	M0001	Product 1	2	3,000

a)b)c)d)

Question 82

Which of the following is an appropriate description concerning the ISMS cloud security certification?

a)An authentication mechanism that enables the use of multiple cloud services, systems, and other such things with only one authenticationb)A scheme that certifies, for a cloud service, that the controls specific to cloud services are implementedc)A scheme that evaluates cloud service providers and other such businesses that have established a system for taking appropriate protective measures for personal information, and permits them to use the PrivacyMark in their business activitiesd)A mechanism that analyzes the situation on the basis of the environment, the IP address, and other such things when a user logs in to a cloud service, and performs additional authentication when the risk is judged to be high

Question 83

Same question on ITPEC: Apr 2025 Q4

When a six (6)-sided dice with the numbers 1 to 6 is thrown three (3) times, what is the probability of not getting any 1?

a)1216b)572c)91216d)125216

Question 84

Which of the following is a technology that is also used in IoT area networks, and that achieves communication over a wide area by communicating in a relay manner, in which wireless communication from an IoT device is repeatedly relayed by other IoT devices?

a)GPSb)MIMOc)Carrier aggregationd)Multi-hop

Question 85

The function binaryToInteger receives, as the argument binaryStr, a value that represents an unsigned binary number of one or more digits as a character string, and returns the result of converting the value into an integer as the return value. For example, when it receives “100” as the argument, it returns 4. Which of the following is the appropriate combination of pieces of code to be inserted into A and B in the program?

[Program]

○ integer: binaryToInteger(string: binaryStr)

integer: integerNum, digitNum, exponent, i

integerNum ← 0

for (increase i from 1 to the number of characters in binaryStr by 1)

digitNum ← the value obtained by converting the i-th character from the end of binaryStr to integer type

// Example: The character “1” is converted to the integer value 1

exponent ← A

integerNum ← B

endfor

return integerNum

a)(2 to the power of i) − 1integerNum × digitNum × exponentb)(2 to the power of i) − 1integerNum + digitNum × exponentc)2 to the power of (i − 1)integerNum × digitNum × exponentd)2 to the power of (i − 1)integerNum + digitNum × exponent

Question 86

Same question on ITPEC: Oct 2025 Q44

Which of the following is the appropriate example of activities performed in C (Check) in the organizations that operate ISMS on the basis of the PDCA model?

a)Changing the server monitoring method as a corrective action that is based on the audit results of the business operationsb)Identifying the information assets in the server room in order to decide specific measures and objectivesc)Objectively evaluating the server administrator’s work details by a third partyd)Monitoring the behavior of the server according to the defined operational procedure

Question 87

What is the general term for the content on the Internet that is not found by ordinary search engines and, because it is highly anonymous, is sometimes used for cyberattacks, trading of illegal goods, and other such things, and that may require special software to access?

a)RSSb)SEOc)Cross-site scriptingd)Dark web

Question 88

Which of the following is an appropriate description concerning JavaScript?

a)It can build dynamic behavior and other such things into a Web browser.b)It runs only on a Web server, not on a Web browser.c)It must be compiled in advance in order to be executed.d)As the name suggests, it is the script version of Java.

Question 89

Same question on ITPEC: Apr 2025 Q45

Which of the following is an appropriate description concerning user authentication of a system?

a)A mechanism that achieves login to multiple servers, applications, and other such things with a single authentication is called challenge-response authentication.b)A mechanism that authenticates a user by using fingerprints, voice prints, and other characteristics of a body is called single sign-on.c)A code number that is used in order to authenticate a user of an information system is called a PIN.d)A method where, instead of the order of specific numbers or characters, the positions in a grid are memorized, and during authentication, a person enters the numbers and characters in the positions that he/she remembers in a grid that is displayed on the screen is called multi-factor authentication.

Question 90

Which of the following is an appropriate description of a WAF that is used as a security measure?

a)A mechanism that, on EC sites and other such Web sites, provides protection against attacks that exploit vulnerabilities in Web application software, and detects patterns of suspicious accessb)A mechanism that uses a public network such as the Internet to achieve a secure communication environment like that of a leased linec)A mechanism that, in an information system, prevents the loss of confidential data and its leakage to the outside by identifying and monitoring the confidential datad)A mechanism that uses a firewall to create a buffer zone between the Internet and the internal network of a company

Questions 91–100

Question 91

Which of the following is the most appropriate measure against information leakage when a PC that is no longer needed in the workplace is disposed of?

a)The file deletion function provided by the OS is used to delete all the data files in the PC.b)All the applications that are installed on the PC are uninstalled.c)All the storage devices that are built into the PC are logically formatted.d)By using dedicated software or other such tools, random data is overwritten a specified number of times in order to erase the contents of all the storage devices that are built into the PC.

Question 92

When one (1) server that is connected to the Internet provides both an e-mail sending and receiving function and a Web access function, which of the following is used by an application program on a terminal to specify to the server which of these functions it uses?

a)IP addressb)Domainc)Port numberd)Host name

Question 93

From the “Employee” table managed in a relational database, the employees whose names match ‘%葉_’ were extracted. How many employees were extracted? Here, “_” represents any one (1) character, and “%” represents a character string that consists of zero (0) or more of any characters.

Employee

Employee number	Name
S001	千葉翔
S002	葉山花子
S003	鈴木葉子
S004	佐藤乙葉
S005	秋葉彩葉
S006	稲葉小春

a)1b)2c)3d)4

Question 94

Among the tasks performed in formulating an information security policy at a company, which of the following is an appropriate order of implementation of the tasks below?

AThe person responsible for and the persons in charge of the formulation are determined.BThe basic policy of information security measures is formulated.CThe information assets held are identified and classified.DRisks are analyzed.

a)A → B → C → Db)A → B → D → Cc)B → A → C → Dd)B → A → D → C

Question 95

Same question on ITPEC: Apr 2026 Q13

Which of the following is the most appropriate technology that is used in deep learning, an AI-related technology?

a)Social networkb)Neural networkc)Feasibility studyd)Fault tolerant

Question 96

Same question on ITPEC: Apr 2026 Q34

Mr. A specified destination addresses as below and sent an e-mail. Among the descriptions concerning recipients of the e-mail, which of the following lists all and only the appropriate descriptions?

[Destination addresses]

To: Mr. B’s e-mail address

Cc: Mr. C’s e-mail address

Bcc: Mr. D’s e-mail address, Mr. E’s e-mail address

(1)Mr. C can find out Mr. D’s e-mail address.(2)Mr. D can find out Mr. C’s e-mail address.(3)Mr. E can find out Mr. D’s e-mail address.

a)(1)b)(1), (3)c)(2)d)(2), (3)

Question 97

Among the following OSs, which of the following lists all and only those that are provided as OSS (Open Source Software)?

AAndroidBFreeBSDCiOSDLinux

a)A, Bb)A, B, Dc)B, Dd)C, D

Question 98

Same question on ITPEC: Oct 2025 Q45

Which of the following is the most appropriate description of ransomware?

a)It secretly establishes a route for intrusion in order to perform unauthorized login to a PC from an external network.b)It unilaterally encrypts the files of a PC, and demanding money for provision of the decryption key, etc.c)It hijacks a web browser and intervenes in the communication for online banking, etc., and performs a fraudulent money transfer.d)It has a function to spread itself over a network to become widespread.

Question 99

Which of the following achieves higher positioning accuracy by taking an orbit that stays over a specific region for a relatively long time and by being used together with GPS, so that positions can be measured even in places where it is difficult to catch GPS radio waves, such as between tall buildings and in narrow alleys?

a)Assisted GPSb)Gyro sensorc)Quasi-zenith satellited)Probe car

Question 100

Same question on ITPEC: Apr 2026 Q45

A user who specifies a correct URL and attempts to access the website on the Internet is connected to a fake website. When the cause was investigated, it was found that there was a vulnerability on the server that matches a domain name with an IP address, and the information on the server was overwritten by an attacker. Which of the following is the attack against this server?

a)DDoS attackb)DNS cache poisoningc)Social engineeringd)Drive by download