IPA IP 2022 Question 37
A question IPA Japan published in 令和4年度 ITパスポート試験 公開問題 問37, translated into English. ITPEC is based on the same exams.
Same question on ITPEC: Oct 2023 Q65
Several functions are implemented for internal control by the system. Which of the following is the appropriate function that the process below implements?
The login screen is displayed. A user enters the user ID and the password. If the combination of the user ID and the password matches the already-registered combination, the screen transits to the business menu screen. If not, the screen does not transit, and an error message is displayed.
Explanation
Access control by the system — checking the user ID and password before opening the business menu lets only registered users in.
The process identifies the user (user ID), authenticates the user (password matching the registered pair), and lets through only a user who passes; anyone else stays on the login screen with an error. Preventing unauthorized people from using the system in this way is access control, one of the IT controls that support internal control.
Answer (b)
Why not others:
- •(a) — detecting a system failure means monitoring the system's own operation; a login check says nothing about failures
- •(c) — access rights are granted beforehand, when the user ID and password are registered; the login only checks against what was granted
- •(d) — confirming that a password setting is valid means checking its length, character types or expiry when it is set, not comparing an entered password with the registered one
Key rule: Registering users and granting rights comes first; the login check that enforces them at every use is access control.
System Audit · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.