IPA IP 2026 Questions and Answers

IPA IP 2026

Questions IPA Japan published in 令和8年度 ITパスポート試験公開問題, translated into English, with IPA's answers. ITPEC is based on the same exams, so they are good practice for ITPEC too.

Question 1

Concerning the handling of products created by using generative AI, which of the following lists all and only the cases that may require permission from the copyright holder of an existing copyrighted work?

AMusic was generated by using generative AI so as to obtain music similar to the songs of a favorite artist, and the music was uploaded to the Internet and released free of charge.BMusic was generated by using generative AI so as to obtain music similar to the songs of a favorite artist, and the music was stored on one’s own PC and listened to privately.CWhen music was generated by using generative AI, music similar to the songs of a favorite artist happened to be generated, so it was stored on one’s own PC and listened to privately.

a)Ab)A, Bc)A, B, Cd)B, C

Question 2

Which of the following is an appropriate description concerning BYOD?

a)Employees using their privately owned mobile devices in the company’s business operations after obtaining permissionb)Streamlining routine tasks in the company’s business operations with software robotsc)Analyzing the flow of the company’s business operations, and continuously improving and optimizing itd)Reviewing the flow of the company’s business operations, and fundamentally redesigning it

Question 3

The profits of Company A, an investment company, when it adopts each investment strategy are forecast as shown in the table. Which of the following is the profit when Company A adopts the maximin strategy and the market improves? The maximin strategy is a theory of adopting a strategy so that the minimum value of the profit forecast for each strategy is the largest.

Market improves	Market worsens
Investment strategy a	20	−15
Investment strategy b	5	0

a)−15b)0c)5d)20

Question 4

Which of the following is an event where software developers, planners, and others intensively exchange ideas over a short period on the theme of achieving a specific purpose or solving an issue, perform collaborative work such as software development, and compete on the results?

a)Trade fairb)Hackathonc)Panel discussiond)Reception

Question 5

An application for a new business model concerning corporate advertising using the Internet was filed as intellectual property, and the business model was implemented as a computer system. Which of the following is the law that protects this business model as intellectual property?

a)Design Actb)Utility Model Actc)Copyright Actd)Patent Act

Question 6

Which of the following is the most appropriate explanation concerning digital transformation?

a)Differences arising in various opportunities between people who can make full use of digital products such as PCs and smartphones and people who cannot, leading to social disparitiesb)The generation that has had the Internet and digital products such as PCs and smartphones close at hand since birth, and has grown up using themc)Converting analog signals from a device such as a microphone that collects sound into digital signals in order to save them as an electronic filed)Digital technology affecting every aspect of human life, business, and other areas, and bringing about transformation

Question 7

There is a technique called “value engineering” that understands the value of a product or service through the relationship between function and cost, and aims to improve the value. Which of the following is an appropriate representation of the relationship among value, function, and cost in value engineering?

a)Value = Function / (Cost + Function)b)Value = Function / Costc)Value = Function × Costd)Value = Cost / Function

Question 8

Which of the following is the most appropriate example of a system that uses IoT?

a)A service is provided that mediates between an unspecified large number of borrowers and lenders on the Internet in raising funds.b)Users’ sentiments toward products and services are analyzed from posts on social media, the contents of calls at a call center, and other sources.c)Information from sensors installed in facilities such as stores and factories is collected via the Internet, and employees monitor the status of the facilities by using smartphones.d)Storage on the Internet for saving electronic files such as documents and images is provided as a service.

Question 9

Among the following costs that arise in connection with the manufacture of products, which of the following lists all and only the indirect costs?

ALabor cost for inspecting finished productsBLabor cost for maintaining the power supply equipment of a factoryCOutsourced processing cost of products

a)A, Bb)Bc)B, Cd)C

Question 10

Among the descriptions concerning meetings, which of the following lists all and only the appropriate ways of conducting brainstorming?

AFree-wheeling ideas are held back, and members are asked to submit feasible ideas.BEven a suggestion that builds on another member’s idea is not criticized, and the session proceeds.CThe session proceeds while ideas suited to the theme are selected from among the ideas put forward by members.

a)Ab)A, Bc)A, B, Cd)B

Questions 11–20

Question 11

At a fan meeting of a professional soccer team, a popular player was photographed signing autographs in a suit, and the photographs were printed and sold at a flea market. Which of the following is the most appropriate right held by the player that may be infringed by this act?

a)Industrial design rightb)Trademark rightc)Copyrightd)Right of publicity

Question 12

Company A decided to visualize its business processes by using a flow diagram in order to identify issues in its own business processes and review them. Which of the following is the most appropriate notation that Company A uses in creating the flow diagram?

a)CRUD diagramb)DMM (Diamond Mandala Matrix)c)E-R diagramd)WFA (Work Flow Architecture)

Question 13

Which of the following is the most appropriate description of anonymously processed information as defined in the Act on the Protection of Personal Information?

a)Information obtained by processing statistical information published by the Ministry of Health, Labour and Welfare, the Statistics Bureau of the Ministry of Internal Affairs and Communications, and others for the company’s own use, and giving it new value by linking it with information held by the companyb)Information in which the names in personal information are anonymized on the basis of certain rules, while restoration to the original personal information is ensuredc)Information that is created by anonymizing personal information by a method specified in laws and regulations so that it cannot be restored, and that can be utilized under certain rules without the consent of the persond)Information collected from users in such a way that, when personal information is collected, names are not obtained and individuals can be identified by other information such as the Individual Number

Question 14

ISO 26000 is an international standard on the social responsibility of organizations. Which of the following is the most appropriate term that represents the social responsibility that a company should fulfill, as specified in ISO 26000?

a)CSRb)SDGsc)Corporate governanced)Social media policy

Question 15

In the innovator theory in marketing, consumers are divided into five groups, innovators, early adopters, early majority, late majority, and laggards, along the process in which a new product or service spreads. In this case, which of the following is the most appropriate term that represents the gap that arises in the spread from the early adopters to the early majority and that is difficult to cross?

a)Cannibalizationb)Chasmc)Valley of deathd)Red ocean

Question 16

In supervised learning, which of the following is the most appropriate term that represents the task of attaching the information that serves as the correct answer?

a)Annotationb)Encodingc)Data cleansingd)Filtering

Question 17

Which of the following lists all and only the appropriate matters to be noted in utilizing AI?

AThe possibility that unintended behavior of AI causes harm to human life, body, or the likeBThe possibility that a judgment by AI contains discriminatory contentCThe possibility that a judgment by AI contains content that infringes privacy

a)A, Bb)A, B, Cc)A, Cd)B, C

Question 18

Which of the following is the most appropriate purpose of adopting concurrent engineering?

a)Shortening the development period and the delivery timeb)Ensuring security in developed productsc)Ensuring the energy-saving performance of developed productsd)Utilizing the latest technology in developed products

Question 19

Which of the following is an appropriate business operator, or a form of service, that provides users with application software installed on a server via the Internet?

a)ASPb)ISPc)Outsourcingd)Data warehouse

Question 20

Which of the following is an appropriate description of an RFP in system development?

a)A proposal document that an IT vendor created in order to propose to a user the necessity of developing an information systemb)A document that the ordering party created in order to present to IT vendors the procurement conditions and other such information for the information system to be developedc)A design document that the ordering party and the IT vendor that received the order created jointly in order to clarify the specifications of the system to be developedd)A document in which a user department requested the information systems department to clarify the necessity of developing an information system and the development requirements

Questions 21–30

Question 21

Which of the following explains the legislative purpose of the Basic Act on Cybersecurity?

a)Defining acts of unauthorized access to computers, prohibiting those acts and setting penalties for them, and aiming to maintain order in network communicationsb)Establishing practical norms for putting in place and operating appropriate controls concerning information security, and encouraging companies and other organizations to promote effective information security measuresc)Establishing basic principles for measures to defend against acts such as unauthorized intrusion into computers through information and communications networks, clarifying matters such as the responsibilities of the national government and local governments, and aiming to promote the measures comprehensively and effectivelyd)Ensuring the business interests of companies and other organizations by regulating acts such as disabling technological restriction measures that prevent the copying of digital content

Question 22

Which of the following is the most appropriate means of achieving automation and improved efficiency by having a software robot take over routine office work such as slip input processing?

a)BPOb)EUCc)FAd)RPA

Question 23

Which of the following is the most appropriate description concerning listing advertisement, which is one of the techniques of Internet advertisement?

a)An advertisement is displayed on the basis of the user’s behavior history, such as the browsing history of websites and the purchase history of online shopping.b)An advertisement is displayed in conjunction with the keywords that a user of a search engine enters in the search box.c)Advertisement e-mails are delivered to users who have agreed in advance to receive advertisement e-mails.d)An advertisement is placed in an e-mail magazine that is issued periodically, and delivered.

Question 24

Which of the following is an appropriate explanation of corporate governance?

a)A framework that governs corporate activities, centered on the monitoring and supervision of the management executives by stakeholders including shareholdersb)The procurement of capital that a company needs to carry out its activitiesc)Communicating the philosophy and characteristics of a company through a unified image, design, etc., and aiming to improve the brand value of the companyd)The unique skills or technologies of a company that bring value that competitors cannot provide

Question 25

There is a concept that defines information assets that have the three (3) elements of high volume, frequent updates, and wide variety as “big data.” What is the collective term for the three (3) elements that characterize this big data?

a)3Cb)3Dc)3Gd)3V

Question 26

The table is the balance sheet of Company A. What is the equity ratio of Company A in percentage?

a)30b)54c)70d)90

Question 27

When AI is classified into “strong AI,” which can make judgments on various problems, and “weak AI,” which can make judgments only on specific problems, which of the following is the most appropriate description of “weak AI”?

a)Intelligence equivalent to that of humans is reproduced on a computer, and it can make judgments as humans do, but it may also make judgment errors in the same way as humans.b)It does not understand the meaning of the question itself or think as humans do, but it can present the result of a judgment.c)It is smarter than humans, and it can improve its own judgment ability without human help.d)It has the ability to make flexible judgments by autonomously applying the knowledge and abilities that it has.

Question 28

Among the risks related to commercial transactions on the Internet, which of the following is an appropriate risk that can be reduced by using an escrow service?

a)When an incorrect purchase amount is entered on an auction site, the transaction cannot be canceled.b)Although the payment for a product has been made, the product is not delivered.c)The password used on a shopping site is leaked.d)Once an ordered product is received, the contract cannot be canceled for the buyer’s own reasons.

Question 29

In outsourcing program development work, which of the following is an appropriate explanation of the case where there is no special arrangement concerning the rights and obligations of the orderer and the contractor in a contract for work?

a)When the contractor further has another vendor undertake part of the work, it must obtain the orderer’s consent in advance.b)When the completed program has a defect, the orderer can request the repair of the defect at any time.c)The orderer becomes obligated to pay the remuneration at the time when it receives the delivery of the program.d)Before the program is completed, the orderer can cancel the contract for work at any time without compensating the contractor for damages.

Question 30

Which of the following is an example of a divisional organization?

a)A belongs to the purchasing organization of the division that carries out business X. Purchasing for business Y is handled by the purchasing organization of the division that carries out business Y.b)B belongs to an organization that handles the personnel function for multiple businesses. Likewise, the development, production, and sales functions are each handled by a specialized organization.c)C is in charge of sales of product X in region M, and receives instructions from two (2) superiors: the superior responsible for sales in region M and the superior responsible for sales of product X.d)D belongs to an organization that has gathered personnel across the related departments for the purpose of planning and developing a new business. This organization is dissolved as soon as the planning and development are completed.

Questions 31–40

Question 31

Among muri (overburden), mura (unevenness), and muda (waste), which are the viewpoints of business improvement in the lean production system, which of the following is the most appropriate as an example of muda?

a)Work that depends on specific individuals, so the quality of the deliverables differs depending on the person in chargeb)An unreasonable plan or work standard that places a load beyond the capacity of the organizationc)Actions that do not create added value, such as waiting and processing more than necessaryd)Work that places a burden on a part of the body for a long time and may harm health

Question 32

Which of the following is the most appropriate example of a niche strategy?

a)Apparel manufacturer Company A moved its production bases overseas to reduce production costs. It also decided to sell low-priced products nationwide, focusing on casual wear that can be expected to sell in large volumes.b)Food manufacturer Company B, ranked second in the industry, decided to carry out a business integration with Company C, ranked third in the industry, to gain the top share.c)Metal processing manufacturer Company D decided to make use of its own unique processing technology to sell expensive waterless cooking pots with extremely high airtightness to high-end restaurants.d)Electrical machinery manufacturer Company E decided to sell its medium-sized TV business, whose sales volume had been decreasing, and withdraw from it completely.

Question 33

Which of the following comprehensively manages the series of linked business operations of purchasing, manufacturing, and sales that connect suppliers to consumers, and aims to optimize the entire process by eliminating waste such as inventory from the procurement of materials to sales to customers?

a)CRMb)POSc)SCMd)SFA

Question 34

Which of the following lists all and only the items that should be clarified when an IT basic plan is formulated?

AStakeholders involved in the utilization of IT systemsBResponding to the current and future needs of the organizationCManagement procedures for incidents that have occurredDBusiness requirements based on agreement with users and other concerned parties, and their priorities

a)A, Bb)A, B, Cc)A, B, Dd)B, C, D

Question 35

For the management and processes involved in the planning, development, operation, and maintenance of information systems, management needs to perform evaluation, direction, and monitoring as its activities in IT governance. Which of the following lists all and only the appropriate descriptions concerning the activities of management in IT governance?

AResponsibility and authority are delegated to an external consultant, who is left to handle everything from strategy formulation to monitoring.BInformation is collected to check to what extent the effects assumed in the information system strategy have been achieved.CThe responsibilities and personnel required to realize the information system strategy are assigned to the organization.DMultiple future visions of the information system are envisaged, and external information system experts are asked to perform a comparative analysis for evaluation.

a)A, B, Cb)A, Cc)B, Cd)B, C, D

Question 36

There is a system development project whose contract includes the work of installing software on client PCs. Among the descriptions concerning actions in the installation work, which of the following lists all and only the appropriate ones?

ADuring the installation work, a PC not covered by the contract was found. That PC was excluded from the installation.BDuring the installation work, installation on a PC not covered by the contract was requested. On the basis of the request, it was handled free of charge.CIt became difficult to continue the installation work. Upon agreement with the client, the state before the installation was restored.

a)Ab)A, Bc)A, Cd)B, C

Question 37

Mr. A is doing the work of the planning phase of a new project, and has started estimating the development cost. Which of the following is the most appropriate method for estimating the approximate cost in a short time at this phase?

a)Estimating by using the FP methodb)Estimating the cost of each unit of work, and adding them up to estimate the wholec)Estimating on the basis of the expected number of lines of code of the softwared)Estimating with reference to similar projects

Question 38

Which of the following is the most appropriate development model or technique to be used for the development of software whose requirements are clear and for which few specification changes are expected?

a)Agile developmentb)Waterfall modelc)Spiral modeld)Prototyping model

Question 39

Which of the following is the most appropriate explanation of WBS in project management of system development?

a)It describes the activities on the critical path.b)It describes the planned start dates and planned end dates of the major deliverables.c)It describes the activities for creating all deliverables, decomposed hierarchically.d)It describes the tools used in the project.

Question 40

Among the descriptions concerning the activities of a company, which of the following is the most appropriate as an activity of internal control?

a)When there is a material error in the content of a financial results announcement, it is promptly disclosed to the public.b)When a payment slip is drawn up, the person who drew it up checks it on his/her own responsibility and gives the final approval.c)Risks are evaluated periodically, and all of the identified risks are dealt with by “avoidance.”d)It is enforced as a rule that internal whistleblowing must always be done through the immediate superior.

Questions 41–50

Question 41

In the activities of IT governance, which of the following is the most appropriate description of a risk concerning the leadership of the board of directors, etc.?

a)Unless the department in charge is made to bear the final responsibility for the IT strategy, which is a deliverable that it was made to formulate through delegation of authority, the board of directors, etc. cannot fulfill its accountability.b)If the board of directors, etc. is involved in setting the expected values of performance as an organization, they become status quo-oriented, and the objectives of the organization cannot be achieved.c)Unless the board of directors, etc. formulates norms and takes the lead in complying with them, the ethical behavior is not instilled throughout the organization.d)If the board of directors, etc. clearly states the IT governance policy of the organization, the activities become biased toward those led by the information systems department.

Question 42

Which of the following is the most appropriate description concerning a service desk?

a)A point of contact that receives reports of defects from users at the stage of acceptance testingb)A point of contact that receives inquiries from users at the stage after the system goes into operationc)A point of contact that receives questions from users at the stage of program developmentd)A point of contact that receives requests from users at the stage of requirements definition

Question 43

A company is planning the development of application software for smartphones, and has decided to repeatedly release a new version that includes new functions and corrections of defects every 2 weeks. The policy is that candidates for new functions and defects are managed in a list, developed in order of priority, and released one after another. Which of the following is the most appropriate software development model to be adopted for this development?

a)DevOpsb)Agilec)Waterfalld)Reverse engineering

Question 44

A service desk handles inquiries by e-mail, and a receptionist checked the content of each e-mail and assigned a person in charge of answering. Recently, an automatic assignment tool was introduced for the purpose of improving the efficiency of the assignment work. The automatic assignment tool assigns a person in charge of answering automatically on the basis of the content of the e-mail, but there are cases where it cannot make an assignment or makes an incorrect assignment, and these are handled manually. When the situations before the introduction and half a year after the introduction are as follows, by what percentage could the time for assignment be reduced for the service desk as a whole? Here, the reduction rate (%) of the time for assignment is rounded off to the nearest whole number.

Before introduction

Number of inquiries	1,000 inquiries/day
Time for assignment	2 minutes/inquiry

Half a year after introduction

Number of inquiries	1,000 inquiries/day
Percentage that could be automatically assigned	90%
Time for assignment	0 minutes/inquiry
Of which, percentage of incorrect assignments	5%
Time for assignment	4 minutes/inquiry
Percentage that could not be automatically assigned	10%
Time for assignment	2 minutes/inquiry

a)80b)81c)85d)86

Question 45

In a project, which of the following is an appropriate document that formally authorizes a new project?

a)Stakeholder registerb)Project charterc)Project scope statementd)Risk register

Question 46

Which of the following is an appropriate explanation of problem management, which is a process of IT service management?

a)Maintaining and managing configuration information, such as hardware, software, and documents, for providing IT servicesb)Promptly restoring the service in response to an unplanned interruption of the IT servicec)Investigating the root cause of failures and presenting solutions to problemsd)Making a plan for implementing program modifications and managing them so that the modifications are made reliably

Question 47

When audits are classified into accounting audits, business operations audits, information security audits, and system audits, which of the following is the most appropriate description concerning the system audit?

a)Verification that risk management concerning the leakage of information used in business operations is implemented effectivelyb)Verification that the overall business operations leading up to the preparation of financial statements are processed without impropriety or errorsc)Verification that the organization responds appropriately to risks related to information systemsd)Verification that the various business operations in the organization, including the use of information systems, are operated rationally and efficiently in accordance with the policies of the organization

Question 48

In an organization, the group that manages IT assets checks the usage of the shared disk monthly, and when the capacity is likely to become insufficient, it takes measures to avoid a capacity shortage, such as calling on users to delete unnecessary files and moving files that are not used immediately to another medium. Adding a shared disk is planned and implemented on a yearly basis. One day, the usage of the shared disk reached its upper limit, and an event occurred that hindered the business operations of the organization. When the response to this event is considered by dividing it into incident management, problem management, and improvement of the service management system, which of the following is the list that contains all and only appropriate items as improvement of the service management system?

AInvestigate the files with a large usage of the shared disk, and temporarily move those that are not used for business operations for the time being to another storage.BIdentify the cause of the usage of the shared disk reaching the upper limit, and consider measures to prevent recurrence.CMake it possible to grasp the usage of the shared disk in a timely manner, so that signs of a capacity shortage can be detected at an early stage.DImmediately proceed with the procedure for adding a shared disk.

a)A, Db)B, Dc)Cd)C, D

Question 49

Which of the following is the most appropriate description concerning project meetings held in a system development project?

a)In order to make the decisions made at the meeting thoroughly known, minutes are prepared and shared with the necessary persons concerned.b)So that discussions do not end halfway, the meeting is held without deciding its end time.c)In order to carry out the system development project efficiently, all stakeholders always attend all meetings.d)So that various matters can be discussed at the meeting, the agenda of the meeting is collected from the participating members and finalized immediately after the meeting starts.

Question 50

When the activities in the following table are performed by 3 persons, what is the minimum number of days required to complete all activities? Here, an activity that requires multiple staff cannot be started until all of them are available, and assigning more staff than the specified number does not shorten the days required. Also, an activity that has been started cannot be interrupted until it is completed.

Activity name	Preceding activity	Number of staff	Days required
A	–	1 person	3 days
B	A	2 persons	3 days
C	A	2 persons	3 days
D	B	1 person	3 days
E	C	2 persons	3 days
F	D, E	1 person	3 days

a)9 daysb)12 daysc)15 daysd)18 days

Questions 51–60

Question 51

In a system audit, it has been decided to investigate the status of management of external media in each department. When the system audit is performed by dividing it into the processes of audit planning, preliminary investigation, main audit, and evaluation and conclusion, which of the following is the process in which the audit opinion on the status of management of external media is examined on the basis of the collected results?

a)Audit planningb)Preliminary investigationc)Main auditd)Evaluation and conclusion

Question 52

In the development of a business system, when the developer performs system requirements definition, which of the following is the most appropriate way for the user to be involved?

a)The user participates in the review of the system requirements that is performed by the developer, and confirms their validity.b)The user leaves everything to the developer, and follows the developer’s decisions.c)The user determines whether maintenance of the system is possible.d)The user verifies the technical feasibility of the system requirements.

Question 53

Which of the following performs activities such as planning of an SLA, negotiation of service content, drafting, agreement, introduction, and measurement?

a)Outsourcingb)Service level managementc)Service level agreementd)Reengineering

Question 54

In an organization, in the past all the employees came to the office to carry out their work, but currently they carry out their work by using both coming to the office and telework as appropriate. In this organization, which of the following lists all and only the appropriate examples of improvement that are made from the viewpoint of facility management?

AThe Web conference software installed on employees’ PCs is always kept up to date, and the convenience and security of Web conferences are improved.BThe layout of the office room is changed and a TV conference room with a large screen is set up, so that it is easy for employees to communicate with each other.COn the basis of the rate of coming to the office, the proportion of the free address area is increased and the office is downsized.DA system that allows short working hours and work at places other than home is introduced, so that it is easy for various employees to participate in work.

a)A, Db)Bc)B, Cd)B, D

Question 55

Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning the security of IoT?

Among the threats of the images of a network camera being viewed secretly, as a countermeasure against A on the network camera, in order to prevent a third party from accessing the camera and viewing its video, the camera is not used with B.

a)DDoS attackthe initial passwordb)DDoS attacka wired linec)unauthorized intrusionthe initial passwordd)unauthorized intrusiona wired line

Question 56

Which of the following is an appropriate description of a checkpoint in a DBMS?

a)Confirming the series of processing of a transaction when the transaction has been processed normallyb)Returning the database to the state prior to the start of the processing of a transaction when the transaction has not been processed normally for some reasonc)A state where, while multiple transactions are processed in parallel, the transactions wait for each other to release the other’s lock because of the effect of locksd)The operation of writing the results of data updates in memory by multiple transactions collectively at one time to an external storage device such as an HDD, or the point in time at which the operation is performed

Question 57

There are the “Student” table, the “Subject” table, and the “Grade” table that are managed in a relational database. When one (1) student takes multiple subjects, and a student who is not registered in the “Student” table or a subject that is not registered in the “Subject” table cannot be registered in the “Grade” table, which of the following is appropriate to be set as a foreign key? Here, an underline in a table indicates a primary key.

Student

Student number	Student name
G001	Suzuki Jiro
G002	Yamada Haruko

Subject

Subject code	Subject name
K001	Database
K002	Computer
K003	Network

Grade

Student number	Subject code	Grade
G001	K001	Excellent
G001	K002	Fair
G002	K002	Good
G002	K003	Excellent

a)Student number in the “Student” table, Student number in the “Grade” tableb)Student name in the “Student” table, Subject name in the “Subject” tablec)Student number and Subject code in the “Grade” tabled)Grade in the “Grade” table

Question 58

Which of the following are the three scenarios in the structured scenario method that is sometimes used in UX design?

a)Activity, interaction, valueb)Activity, interaction, personac)Activity, value, personad)Interaction, value, persona

Question 59

Which of the following is an appropriate function of WPA2 that is used in wireless LANs?

a)It speeds up the transmission and reception of data by using two (2) antennas.b)It makes the access point stealth.c)It encrypts communication data.d)It rejects access from devices other than those that have registered MAC addresses.

Question 60

Which of the following is an appropriate description concerning responsive Web design?

a)The screen layout of a website changes depending on the screen size, etc. of the terminal on which it is displayed, so that the website is easy to view and easy to operate on many types of terminals, such as PCs and smartphones.b)When video content is played by streaming on a Web browser, the browser is connected to the server suitable for the user among multiple content delivery servers and acquires data, so that the load on servers and the network is reduced.c)In a Web application for terminals such as smartphones, the data of the acceleration sensor and the gyro sensor built into the terminal is used, so that the number of steps, the speed of movement, etc. can be measured.d)When the user of a Web browser places the mouse pointer over Web content, a pop-up is used to display the explanation of a function, the status of the object, etc., so that the user can understand how to use the website without reading an instruction manual.

Questions 61–70

Question 61

Which of the following is the memory dedicated to screen display that is used to hold the data required for the screen display of a PC?

a)EEPROMb)VRAMc)Cache memoryd)Flash memory

Question 62

Which of the following is an appropriate description concerning a benchmark test in the performance evaluation of a system?

a)The same data and the same programs as those used in the system to be evaluated are executed on another pseudo system to evaluate the performance.b)A model of the operating characteristics of the system to be evaluated, in a form that is easy to handle, is used and executed on another pseudo system to evaluate the performance.c)The processing time is accumulated based on desk-calculated values such as the number of program steps, the hardware performance, and the number of I/O operations of the system to be evaluated, to evaluate the performance.d)Standard processing is set, and an evaluation program that executes it is actually executed on the system to be evaluated to evaluate the performance.

Question 63

Which of the following is an appropriate measure for reducing the damage caused by ransomware that makes the files saved on a PC unusable?

a)Installation of a UPSb)Encryption of datac)Backup of datad)Change of the login password

Question 64

Which of the following is an appropriate explanation of carrier aggregation?

a)A technology that switches the base station to which a mobile phone connects while it is movingb)A technology that enhances the security functions of mobile phone communicationc)A technology that speeds up wireless communication by bundling radio waves of multiple different frequenciesd)A technology in which terminals communicate with each other via a base station called an access point in a wireless LAN

Question 65

Which of the following is an appropriate description concerning the role of a DNS server?

a)It relays requests from PCs on a LAN to web servers on the Internet, and accesses the web servers on the Internet on behalf of the PCs and returns their responses to the PCs.b)It accepts requests from PCs to send and receive files to and from the server, and transfers the files.c)It automatically assigns IP addresses to PCs, and notifies them of the subnet mask and the IP address of the default gateway.d)It converts domain names to IP addresses, or converts IP addresses to domain names.

Question 66

When application software is operated, which of the following is the function that enables complicated operations to be performed easily in an interactive format in which the user answers questions?

a)Archiveb)Wizardc)Autocompleted)Pop-up window

Question 67

The procedure sort receives an integer-type array with 2 or more elements as the argument numberArray, and outputs the result of sorting its elements in ascending order. To check the operation of the procedure sort, the value of j and all the elements of workArray are output in the middle of the processing. When the array numberArray is {3, 5, 1, 2, 4} and the procedure sort is called as sort(numberArray), which of the following is the output of all the elements of workArray immediately after the value of j is output as 3? Here, the array index starts at 1.

[Program]

○ sort(integer []: numberArray)

integer: minIndex, j, k

integer []: workArray ← numberArray // Make a copy of the array

for (increase j from 1 to (the number of elements in workArray − 1) by 1)

// Find the index of one of the elements that have the smallest value among

// the elements from the j-th element to the last element

minIndex ← j

for (increase k from (j + 1) to the number of elements in workArray by 1)

if (workArray[k] is less than workArray[minIndex])

minIndex ← k

endif

endfor

swap the values of workArray[j] and workArray[minIndex]

// To check the operation, output the value of j and all the elements of workArray

output the value of j

output all the elements of workArray from the first one in order, separated by commas

endfor

output all the elements of workArray from the first one in order, separated by commas

a)1,2,3,4,5b)1,2,3,5,4c)4,5,3,2,1d)5,4,3,2,1

Question 68

Which of the following is an appropriate combination of protocols that e-mail software uses for sending and receiving e-mail?

Sending protocolReceiving protocol

a)IMAP4POP3b)IMAP4SMTPc)POP3SMTPd)SMTPIMAP4

Question 69

Which of the following is an appropriate combination of words and phrases to be inserted into blanks A and B in the description below concerning normalization of data in a relational database?

One of the main purposes of normalization is to eliminate the duplication of data and A.
Normalization has multiple stages, and as it is advanced through them, B.

a)improve the compression ratioone table is divided into multiple tablesb)improve the compression ratiomultiple tables are integrated into one tablec)maintain consistencyone table is divided into multiple tablesd)maintain consistencymultiple tables are integrated into one table

Question 70

Which of the following is an appropriate description concerning the management of information security incidents in ISMS?

a)Since a flexible response is required for information security incidents, the details of the actual response are recorded instead of documenting the response procedures in advance.b)Knowledge gained from information security incidents is not used for strengthening the information security controls, in order to prevent imitation.c)An information security event is classified as an information security incident at the time it is reported, without waiting for its assessment.d)For information security events, the communication channels and the mechanism are prepared in advance so that they can be reported promptly to the appropriate manager.

Questions 71–80

Question 71

Which of the following is an appropriate example of risk-based authentication that is used on websites such as Internet banking?

a)Because the login was from a PC different from the PC that the user always uses to log in, additional authentication by a secret question that only the user knows was performed.b)Because there was no screen operation for a certain period of time after the user logged in, the user was automatically logged out and asked to log in again.c)Because the user entered the password incorrectly multiple times in a row when logging in, the account was locked.d)Because the password that the user uses to log in had not been changed for a long period of time, the user was prompted to change the password.

Question 72

There are “Account”, “Customer” and “TransactionDetail” tables that are managed in a relational database. When a new customer deposits 10,000 yen at the same time as opening an account, which of the following is the appropriate order in which data is added to the tables? Here, of the underlines, a solid line represents a primary key, and a dashed line represents a foreign key.

Account

Customer

TransactionDetail

a)Account → Customer → TransactionDetailb)Customer → Account → TransactionDetailc)Customer → TransactionDetail → Accountd)TransactionDetail → Account → Customer

Question 73

Which of the following is an appropriate description concerning copyleft in the licenses of OSS (Open Source Software)?

a)The creator of the OSS has waived the copyright of the software.b)The copyright holder of the OSS must demand monetary compensation from users for their use of the software.c)Derivative software that a user of the OSS created by modifying it can be distributed while the source code of the modified parts is kept undisclosed.d)When derivative software that a user of the OSS created by modifying it is distributed, the same license as that of the original OSS must be applied.

Question 74

Spreadsheet software is used to calculate the sum of two binary numbers α and β. The number of digits of α and β is limited to 2, and the values of the digits are entered in cells B3 and C3, and in cells B4 and C4, in the order of the 2’s place and the 1’s place. The worksheet is an example where the binary numbers are α = 10 and β = 11. The result is to be displayed in cells A5, B5 and C5 in the order of the 4’s place, the 2’s place and the 1’s place. Cell B2 is used to store information on the carry from the 1’s place, and the expression IF(C3+C4=2,1,0) is entered in it. Which of the following is the expression that is entered in cell B5?

a)IF(SUM(B2:B4) < 2, SUM(B2:B4), IF(SUM(B2:B4) = 2, 0, 1))b)IF(SUM(B2:B4) < 2, SUM(B2:B4), IF(SUM(B2:B4) = 2, 1, 0))c)IF(SUM(B2:B4) > 2, SUM(B2:B4), IF(SUM(B2:B4) = 2, 0, 1))d)IF(SUM(B2:B4) > 2, SUM(B2:B4), IF(SUM(B2:B4) = 2, 1, 0))

Question 75

Which of the following is an appropriate description concerning the Bcc field in entering the destinations of an e-mail?

a)The e-mail addresses entered in the To field and the Cc field are not made known to the e-mail addresses entered in the Bcc field.b)An automatically encrypted e-mail is sent to the e-mail addresses entered in the Bcc field.c)An e-mail from which the attached files are deleted is sent to the e-mail addresses entered in the Bcc field.d)The e-mail addresses entered in the Bcc field are not made known to the e-mail addresses entered in the To field and the Cc field.

Question 76

Which of the following is the appropriate combination of words to be inserted into blanks A and B in the description below concerning LPWA that is used in IoT devices?

The characteristics of the wireless communication methods classified as LPWA are that their communicable range is A than that of a wireless LAN, and that they consume B power than the fourth-generation mobile communication standard (4G).

a)narrowermoreb)narrowerlessc)widermored)widerless

Question 77

A certain company controlled entry to its server room with a PIN, but added identity verification with an iris authentication device as a countermeasure to prevent entry by unauthorized persons more reliably. Among the elements of information security in the server room, which of the following does this countermeasure enhance?

a)Availabilityb)Integrityc)Confidentialityd)Non-repudiation

Question 78

There is a system that consists of IoT devices and an IoT server, in which an IoT device sends the outside air temperature that it measured to the IoT server, and the IoT device opens and closes a window by following instructions from the IoT server. Which of the following is installed in the IoT device of this system and has the role of converting the outside air temperature into an electrical signal?

a)Actuatorb)Edge computingc)Carrier aggregationd)Sensor

Question 79

In promoting cybersecurity risk countermeasures that are carried out as part of the risk management of a company, which of the following is the most appropriate role required of the management?

a)Leaving all of the formulation and execution of the cybersecurity risk response policy for each department to the security person in charge in the IT departmentb)Appointing a CISO who is the person responsible for implementing cybersecurity countermeasures, and leaving all execution and judgment to the CISOc)Exercising leadership personally through examining the implementation policy, allocating budget and human resources, checking the implementation status, and identifying and responding to problemsd)Delegating the authority and responsibility for analyzing risks in the company’s organization and business and for promoting countermeasures to an outside management consultant who is an expert

Question 80

Which of the following is the appropriate combination of words to be inserted into blanks A and B in the description below concerning biometric authentication?

When starting the design of a system that uses biometric authentication, it is necessary to clarify the purpose of the system and the use of the authentication, and to formulate a policy for setting the authentication accuracy. It can be said that when the false acceptance rate is set to be A, the authentication emphasizes security, and when the false rejection rate is set to be B, the authentication emphasizes convenience for the genuine person.

a)highhighb)highlowc)lowhighd)lowlow

Questions 81–90

Question 81

Which of the following is included in the Bluetooth standard and achieves power-saving communication between devices?

a)BLEb)LPWAc)LTEd)PLC

Question 82

Which of the following is performed by backpropagation, which is used for training a neural network?

a)The weights of each node are adjusted to reduce the error.b)The weights of each node are adjusted to select the optimal activation function.c)The number of nodes is changed to reduce the error.d)The number of nodes is changed to increase the processing speed.

Question 83

Among the information security measures A through C applied to PCs in the workplace, which of the following lists all and only the appropriate measures for preventing malware infection, in addition to installing anti-malware software?

AApplying security patches (update modules) to the OSBSetting a password for the hard disk that serves as the boot driveCIntroducing a login password that is complex and has sufficient length

a)Ab)A, Bc)Bd)C

Question 84

A certain reasoning system can perform reasoning such as deductive reasoning, inductive reasoning, and hypothesis formation. Among the descriptions concerning the input to this reasoning system and the output obtained, which of the following is an appropriate example of performing deductive reasoning?

a)After “HDD and SSD are storage devices” was input, “Increasing the number of HDDs increases the storage capacity” was input. The output was “Increasing the number of SSDs increases the storage capacity”.b)After “For HDDs, increasing the number of units increases the storage capacity” was input, “For storage devices, increasing the number of units increases the storage capacity” was input. The output was “An HDD is a storage device”.c)“An HDD, which is a storage device, has storage capacity” was input, and at the same time “An SSD, which is a storage device, has storage capacity” was input. The output was “All storage devices have storage capacity”.d)After “All storage devices have storage capacity” was input, “An HDD is a storage device” was input. The output was “An HDD has storage capacity”.

Question 85

The function isPrime returns true as the return value if the positive integer given as its argument is a prime number, and false if it is not a prime number. For example, when the function isPrime is called as isPrime(2), the return value is true. Which of the following is the appropriate combination of words to be inserted into A and B in the program?

[Program]

○ boolean: isPrime(integer: num)

integer: div ← 2

if (num is A 2)

return false

else

while (num is B div)

if (the remainder of num ÷ div is equal to 0)

return false

else

div ← div + 1

endif

endwhile

return true

endif

a)less than or equal toequal tob)less than or equal togreater thanc)less thanequal tod)less thangreater than

Question 86

In preparation for database failures, backup files are made every day after closing time. A full backup file is made every Saturday, and a differential backup file is made from Sunday through Friday. A differential backup file means a backup file of all the differential data from the last full backup file up to the day on which the differential backup file is made. Because the database was damaged on a Wednesday, a decision was made to restore the database to the state at the closing time on Tuesday, the previous day. Which of the following is the minimum set of backup files required to restore the database?

a)Differential backup files on Sunday, Monday, and Tuesdayb)A differential backup file on Tuesdayc)A full backup file on Saturday, and differential backup files on Sunday, Monday, and Tuesdayd)A full backup file on Saturday, and a differential backup file on Tuesday

Question 87

Which of the following is an appropriate description of NAS?

a)An external storage device that is connected directly to a network for use, so that it can be used over the network from PCs, smartphones, and other such devicesb)A file format that allows direct access to the required data regardless of the location of the data on the storage medium or the order in which it was writtenc)A technology that manages multiple storage devices as a single device and stores data across them in a distributed manner to achieve faster access and improved fault toleranced)A character string used to identify a wireless LAN network

Question 88

There is a robot that, by being programmed, can raise and lower a pen, move straight ahead, and change direction by turning clockwise. A program that makes this robot draw a regular hexagon with sides of 1 m was created. Which of the following is the appropriate combination of values to be inserted into A and B in the regular hexagon drawing program below?

[Regular hexagon drawing program]

(1)Lower the pen.(2)Set A in the counter for the number of times processed.(3)Execute the following processes in order. ·Move straight ahead 1 m. ·Change direction clockwise by B degrees. ·Add 1 to the counter for the number of times processed.(4)If the counter for the number of times processed is less than 6, return to (3).(5)Raise the pen.

a)060b)0120c)160d)1120

Question 89

Which of the following is the appropriate combination of words to be inserted into A and B in the description below concerning information security?

A cause that may have an undesirable impact on the information assets to be protected is called a A, and a weakness that may impair the value of an information asset itself is called a B.

a)IncidentRiskb)ThreatVulnerabilityc)VulnerabilityIncidentd)RiskThreat

Question 90

Which of the following is an appropriate characteristic of PKI (Public Key Infrastructure)?

a)A method of confirming the owner of a common key is provided.b)The validity of a public key is confirmed by a “web of trust,” in which keys signed by acquaintances are trusted.c)A certification authority guarantees the validity of a digital certificate.d)A method of securely making a private key public is provided.

Questions 91–100

Question 91

Hash functions that are used in digital signatures and blockchains include SHA-256 and SHA-512. Which of the following is an appropriate description concerning such hash functions?

a)When a hash value obtained by using a certain hash function is input into that hash function, the original data can be restored.b)When the same data is input into different hash functions, the hash values obtained are all the same.c)When the same hash function is used, the hash value obtained is always the same if the input data is the same.d)Every hash function has its own inverse function, and the original data can be restored from the hash value.

Question 92

Which of the following is an appropriate example of an information security measure based on the concept of zero trust security?

a)A firewall is placed at the boundary between the Internet and the internal network, and threats from the Internet are blocked at the boundary.b)Two-factor authentication is used for access to information resources on the network, whether the access is from the internal network or from an external network.c)When a vulnerability is found in software installed on a PC that is connected to the internal network, its security patch is applied immediately after it is released.d)Among the PCs that are connected to the internal network, anti-malware software is installed only on the PCs that access the Internet.

Question 93

Among the following items implemented in an ISMS, which of the following is performed first?

a)Determination of the scope of the ISMSb)Information security risk assessmentc)Information security risk treatmentd)Internal audit

Question 94

When information security measures are classified into “technical security measures,” “human security measures,” and “physical security measures,” which of the following is an appropriate example of “physical security measures”?

a)Concerning the handling of confidential information, rules that include penalties are established, and regular training is provided to the persons involved so that they comply with the rules.b)A backup system is prepared at a remote location so that the service can be continued even if a system failure occurs due to a disaster.c)In order to prevent damage from cyber attacks whose methods are becoming more and more sophisticated, information about the methods of and countermeasures against cyber attacks is communicated to employees.d)In order to prevent damage from malware, anti-malware software is installed, and its definition file is always kept up to date.

Question 95

Which of the following is the term for replacing harmful character strings contained in the content that a user entered on a website with harmless character strings so as not to cause a malfunction in processing, which is used in countermeasures against SQL injection and other such attacks?

a)MAC address filteringb)Sanitizingc)Stripingd)Social engineering

Question 96

Which of the following is a cyber attack that has the characteristic of attacking a specific organization or individual continuously over a long period, for example by using multiple attack methods, for purposes such as obtaining confidential information?

a)APT attackb)DDoS attackc)Zero-day attackd)Password list attack

Question 97

Among the descriptions below concerning the handling of OSS (Open Source Software), which of the following lists all and only the appropriate descriptions?

AA recording medium on which OSS is collected is provided to customers for a fee.BModified OSS is provided as OSS with its use restricted to a specific field.CThe source code of OSS in which a defect was found and fixed is provided on one’s own website.

a)Ab)A, Cc)B, Cd)C

Question 98

Which of the following is an appropriate explanation of prompt engineering in AI?

a)AI acquiring universal rules and knowledge from a large number of events and datab)Showing on the screen, with symbols or character strings, that questions, instructions, and other such things for AI can be enteredc)Devising the content of questions and instructions for AI, the provision of information, the specification of output format, and other such things in order to obtain an intended answerd)A computational model used in AI that imitates on a computer the network formed by nerve cells

Question 99

Which of the following is an appropriate combination of words to be inserted into blanks A and B in the description below concerning input devices?

A irradiates paper or other such media with light, reads the reflected light, converts characters and figures into digital data, and loads them into a PC. B is used as a unit that indicates the performance of how finely A can read characters and figures.

a)Image scannerbpsb)Image scannerdpic)Screen readerbpsd)Screen readerdpi

Question 100

Which of the following is the most appropriate description concerning the activities of an ISMS?

a)Business processes are improved for purposes such as reducing the costs of a company and improving the quality of products and services.b)The quality of IT services is continuously improved in order to increase customer satisfaction.c)Information assets are identified, the risks are identified, analyzed, and evaluated, and the information assets are managed.d)The maturity of the development processes of products and services is evaluated and improved.