Questions IPA Japan published in 令和7年度 ITパスポート試験 公開問題, translated into English, with IPA's answers. ITPEC is based on the same exams, so they are good practice for ITPEC too.
Company A entrusts part of its work to Company B under a contract for work. Among the working arrangements (i) through (iii), which of the following lists all and only the states that are regarded as so-called disguised contracting?
Which of the following is the most appropriate guideline standard that was additionally established on the basis of the existing information security management system standards, for building an information security management structure suited to cloud services?
The government has formulated the “Basic Plan for the Advancement of Public and Private Sector Data Utilization” prescribed in the Basic Act on the Advancement of Public and Private Sector Data Utilization, and is working to promote the publication and utilization of public and private sector data. Among the following organizations, which of the following lists all and only those that hold public and private sector data?
Which of the following is the most appropriate method of analyzing the resources a company has by evaluating them with four elements, economic value, rarity, inimitability, and organization, in order to formulate management strategies such as the priority of investment?
Company A purchases and sells Product B. In a certain period, the purchase unit price of Product B kept rising from the beginning of the period, and was highest at the end of the period. When the cost of sales for the period is calculated as “beginning inventory + purchases of goods for the period − ending inventory,” how do the ending inventory and the cost of sales of Product B change when the purchase unit price at the end of the period is used for calculating the ending inventory, compared with the case where the average of the purchase unit prices during the period is used?
The Act on Regulation of Transmission of Specified Electronic Mail is a law that regulates the sending of unsolicited advertising e-mails. Among the following examples of sending e-mails by a person in charge at a company, which of the following can be subject to the regulation of the Act on Regulation of Transmission of Specified Electronic Mail?
Which of the following is a term that represents the practical verification of a new concept or idea before development?
Among the descriptions concerning the handling of data used in machine learning of AI, which of the following lists all and only the appropriate measures that can be considered for reducing bias and ensuring the quality of data?
In generative AI, which of the following is the most appropriate term that represents the output of content that is plausible but differs from the facts?
Which of the following is the most appropriate description concerning FMS (Flexible Manufacturing System), which is also used in smart factories?
Which of the following is the most appropriate document that requests the provider of a new IT solution to provide information such as case examples of its use and technical information, in order to judge whether or not to use that IT solution?
Which of the following is the most appropriate term that represents incorporating intellectual property information into business and management information and analyzing it, sharing the results of the analysis, such as an overview of the current situation and future prospects, with the persons responsible for the business and the management executives, and reflecting them in the business strategy or management strategy?
Which of the following is the organizational form that sets up an independent organization for each business domain within one company, for the purpose of speeding up decision making in business operations and promoting independent profitability of the organizations?
Among the descriptions concerning the handling of another person’s e-mail user ID and password, which of the following lists all and only the acts that are regulated by the Act on the Prohibition of Unauthorized Computer Access?
Which of the following is the most appropriate description concerning accessibility in IT?
Among the examples of the use of AR or VR, which are technologies that use virtual environments, which of the following is the most appropriate example of the use of VR?
When the software lifecycle is divided into the planning process, the requirements definition process, the development process, and the maintenance process, which of the following is the most appropriate information to be collected from vendor companies when the computerization concept is formulated in the planning process?
Which of the following is the most appropriate term that represents a business model in which basic functions and services are provided free of charge, and a profit is made by providing additional functions and services for a fee?
Mr. A in the sales department wants to aggregate the sales forecasts and actual results submitted by each salesperson every month and turn them into graphs, so that the sales performance of the ten (10) salespersons can be understood at a glance. Which of the following is the most appropriate technology or tool to be applied to solve this problem?
Which of the following lists all and only the measures that are effective in strengthening corporate governance?
From April 1 to May 31, there were Transaction ① through Transaction ⑤. When the status of order receipt, sales recording, and cash collection of each transaction is as shown in the table, what is the amount of accounts receivable from this customer as of May 31, in 10,000 yen? Here, there is no balance of accounts receivable as of April 1.
For the purpose of optimizing business operations and information systems, it is desired to clarify the gap between the current state and the ideal on the basis of grasping the current state of business operations and information systems and setting the ideal image that serves as the goal, and to define the improvement activities toward the goal as a migration plan. Which of the following is the most appropriate technique used in this case?
When the core concepts of corporate management are presented by dividing them into three (3), namely mission, vision, and value, which of the following is the most appropriate as what is presented as the vision?
Concerning copyright, which of the following is the appropriate combination of words to be inserted into blanks A and B in the description below?
A is subject to protection under the Copyright Act, but B is not.
Which of the following is the most appropriate term that represents a technology for recording the activities of an individual, such as the travel history on public transportation, the product search history on websites, and the data posted on SNS and blogs, or the records themselves?
The levels of automated driving are generally divided into “Level 1” through “Level 5.” Which of the following is the most appropriate description concerning the level of automated driving indicated by “Level 3,” which is called “conditional driving automation”?
When 5,000 units of a product were sold, the sales were 60 million yen and the profit was 4 million yen. When the variable cost per unit of the product is 7,000 yen, at least how many more units need to be sold to make the profit 10 million yen or more?
Among the processes of formulating a marketing strategy, which of the following clarifies the points of differentiation of the company’s own products?
Which of the following is expressed as the percentage of the time during which the customer could actually use the IT service, out of the agreed service hours?
Concerning IT service management, which of the following is the appropriate combination of terms to be inserted into blanks A and B in the description below?
A is a written agreement concerning service quality that is agreed upon between a service provider and a customer. The activity for checking the status of compliance with A and maintaining and improving the quality of IT services is B.
Which of the following is the most appropriate description of an information security audit?
Concerning the characteristics of the agile model, which is a software development model, which of the following is the appropriate combination of words to be inserted into blanks A and B in the description below?
The agile model, which was proposed in a form that A the waterfall model, in which development is carried out after the requirements are finalized, is a general term for the methods for developing software so that it is possible to B.
Which of the following is the most appropriate description of the case where a change request has arisen in a project in which a change control board has been established?
Among the techniques used in a system development project, which of the following lists all and only the appropriate techniques used for creating a schedule?
Which of the following is a floor in which a space of a certain height is provided under the floor for network wiring, etc., and panels that can be easily removed are laid out as floorboards?
Concerning the procedure for travel expenses when a salesperson in the sales department goes on a business trip, which of the following is the most appropriate description of a situation in which mutual checks between organizations are implemented on a daily basis?
Which of the following is the most appropriate software development model in which software for confirmation is created so that the requirements of users can be confirmed in a visible form at an early stage of system development?
There is a project to create 100 programs in 40 days with a budget of 20 million yen at the time of planning. At the point when 20 days of the project have passed, 40 programs, which are 40% of the whole, have been completed, and a cost of 10 million yen has been incurred. When the indicators of the project are calculated with the following evaluation formulas, which of the following is the appropriate combination of the indicators of the project? Here, the number of days and the cost required for creating each program are all the same, and the same amount of work is always performed during the project period.
[Evaluation formulas]
Schedule (%):
(Number of completed programs ÷ Number of programs expected to be completed at the time of evaluation) × 100
Cost (%):
(Cost incurred for the completed programs
÷ Cost planned for the completed programs) × 100
Which of the following is the appropriate process in which the procedure for installing software whose development has been completed in the production environment is clarified, and the installation is carried out?
A user operates the panel of a bank's ATM to carry out deposit processing. When the requirements of this operation are defined, which of the following is the most appropriate interface for which usability, a quality characteristic in software development, should be considered?
Which of the following lists all and only the appropriate items as the targets of the scope of a system development project entrusted by a customer?
Company A, which provides cloud services, not only has the operators of its service desk respond by telephone to questions concerning operation, but also publishes FAQs on its website. The reception hours of the service desk are from 9 a.m. to 6 p.m. Recently, in order to improve the service level of the service desk, the company has decided to introduce a chatbot for customers. Which of the following is the most appropriate effect of introducing the chatbot?
When an internal audit is performed on an accounting system that is developed and operated in-house, which of the following is the most appropriate as a system auditor?
Company A has launched a project for rebuilding its accounting system, and has outsourced the system development to Company B. Who is appropriate as the auditor who performs a system audit of whether the procedures concerning the quality management of the project are complied with in the acceptance inspection of the deliverables delivered by Company B?
Which of the following is the most appropriate description concerning “response to IT,” which is one of the basic elements of internal control?
At a call center, AI that recognizes the speech of the conversation between a customer and an operator and displays candidate answers to the customer’s inquiry on the screen of the operator’s PC was introduced into the system that supports operators who handle telephone inquiries from customers. The number of inquiries handled per day is 1,000, and they were divided into two (2) groups, A and B, according to the content of the inquiries. When the number of inquiries handled and the handling time of each group before and after AI introduction are as shown in the table, by what percentage could the time for handling the 1,000 inquiries be reduced after AI introduction?
Number of inquiries handled and handling time by group before and after AI introduction
Before AI introduction
After AI introduction
At the start of a system development project, it was decided to prepare a plan concerning human resources. In this plan, which of the following lists all and only the appropriate items that should be considered in order to assign personnel appropriately and obtain better performance?
Which of the following is one of the specifications added to Bluetooth, has excellent power saving characteristics that enable an IoT system to be operated for a long period, and is also used to find the distance between transmitting and receiving devices?
Which of the following is an appropriate description concerning the function of an HTTP proxy server?
Which of the following is an appropriate description concerning internal audits in an ISMS?
Which of the following is an appropriate role of FTP, which is a protocol used in a TCP/IP network?
Which of the following is an appropriate combination of terms to be inserted into blanks A through C in the description below concerning the virtual memory system of an OS?
When a program is executed, it provides, without being restricted by the B capacity of the A unit of the computer, a C address space.
When the scales of data are classified into the four (4) scales of nominal scale, ordinal scale, interval scale, and ratio scale, which of the following falls under the interval scale?
The notation RSS is sometimes seen on websites and other such places. Which of the following is an appropriate explanation of this RSS?
In a DBMS, which of the following is the information that is set and used as necessary for the purpose of performing data searches at high speed?
In the “Login record” table and the “Department” table below that are managed in a relational database, which of the following lists all and only the names of the departments to which the employees belong who have had a login result of failure, or who have had a login result of success at or before 09:00:00 on April 10, 2022?
Login record
Department
Which of the following is the hardware for drawing processing that has functions such as accelerating 3D image processing and making video smooth?
Which of the following is the most appropriate example of an activity performed as a CSIRT?
Which of the following is an appropriate combination of terms to be inserted into blanks A and B in the description below concerning the false acceptance rate and the false rejection rate of biometric authentication?
In the authentication accuracy of biometric authentication, when an attempt is made to keep the false acceptance rate low, A becomes high, and when an attempt is made to keep the false rejection rate low, B becomes high.
Among the threats in information security, which of the following is the one for which applying a security patch that corrects a vulnerability to software is the most effective countermeasure?
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the description below concerning radio waves used for mobile phones?
Radio waves have the property that the A the frequency, the more easily they go around obstacles and the more easily they reach even behind obstacles. Among the frequencies used for mobile phones in Japan, the frequency band from the 700 B band to the 900 B band is called the platinum band because, among other reasons, it has this property and connects easily.
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the description below concerning the four principles for making a design that conveys its intent easily to the viewer?
[Four principles]
Which of the following is the appropriate combination of descriptions concerning attacks that target web services and the names of the attacks?
Among the following storage media, which of the following lists all and only those that use semiconductor memory as their storage elements?
There is a spreadsheet worksheet that calculates the tax-included prices of products. The consumption tax rate is entered in cell B1, and the tax-excluded prices are entered in cells B4 through B6. To display the tax-included prices in cells C4 through C6, an expression is entered in cell C4 and copied to cells C5 and C6. Which of the following is the expression to be entered in cell C4? Here, cell B1 is displayed in percentage format.
Which of the following is a mechanism that detects unauthorized access and suspicious communication by monitoring networks and hosts, and reports them?
Which of the following is the output when the procedure calcMod3 is called?
In AI, which of the following is the term for something that has been trained on wide-ranging and large amounts of data, and has the characteristic that it can be adapted to various uses, such as text-generation AI, through fine-tuning or other such methods?
What is the term for the technology that reads printed characters and handwritten characters from an image of a paper document read with an image scanner, and converts them into text data?
Which of the following is the DBMS function that copies the contents of the database on one computer to the database on another computer, and synchronizes them so that the contents of both match?
In an organization that adopts the PDCA model for the operation of ISMS, the following tasks concerning server monitoring are performed. Which of the following is the appropriate combination of each task and each phase of the PDCA model?
[Tasks]
Which of the following is an appropriate description concerning the information security policy in ISMS?
There is an AI system that solves problems and chooses the correct answer from an answer group. Each time this system goes through one learning process, its error rate decreases by 5% in the comparison before and after the learning process (it becomes 95% of the previous error rate). When the current correct answer rate is 30%, at least how many more learning processes are needed for the correct answer rate to exceed 35%?
Which of the following is the AI technology that automatically extracts the features of dogs, cats, and others from a large number of images showing animals, so that the kinds of animals can be identified?
In PKI, there is a CRL as a list in which the information on digital certificates that meet a certain condition is published. Which of the following is the appropriate condition for being listed in this list?
When information security measures are classified into “technical security measures,” “human security measures,” and “physical security measures,” which of the following is an appropriate example of “physical security measures”?
Mr. A received the following four types of messages from Mr. B. Which of the following lists all and only the received messages that Mr. A can decrypt and read?
Which of the following is an appropriate description concerning security measures for a wireless LAN?
When risk treatment in risk management for information security is implemented by dividing it into the four (4) categories of risk transfer, risk avoidance, risk mitigation, and risk retention, which of the following is an appropriate description concerning these?
Which of the following is an appropriate example of a measure that reduces the damage when a PC used by an employee is infected with ransomware?
Which of the following is an appropriate description of a threat in information security?
A parallel system is to be configured with devices whose availability is 0.9. At least how many devices are required to configure the parallel system so that the availability of this system is 0.999? Here, when the parallel system is configured, the system is considered to be operating normally if at least one (1) device is operating.
Which of the following is an appropriate task that is performed in data analysis in database design?
Among the descriptions below concerning OSS (Open Source Software), which of the following lists all and only the appropriate descriptions?
In information security, which of the following lists all and only the events in which availability was impaired?
When a sequence of data consisting of four (4) elements is sorted in ascending order by repeating the procedure below, how many times is the series of steps (1) through (3) executed until the sorting is completed? Here, at first, the whole sequence of data is the target of sorting.
Sequence of data: [27, 42, 33, 12]
[Procedure]
The function calculateAmountOfPrize receives the improvement amount and the reduction period in the effects of a business improvement as improvement and period respectively, and returns the prize amount as the return value. There were a business improvement with an improvement amount of 200,000 yen and a reduction period of 3 days, and a business improvement with an improvement amount of 50,000 yen and a reduction period of 14 days. How many yen is the total of these two prize amounts? Here, the values of the improvement amount and the reduction period are each 0 or more.
When the factors used for personal authentication are classified into the three (3) categories of knowledge, possession, and biometrics, which of the following is an example of authentication that uses possession as the factor?
