IPA IP 2025 Question 83

Topic: Security

A question IPA Japan published in 令和7年度 ITパスポート試験 公開問題 問83, translated into English. ITPEC is based on the same exams.

In an organization that adopts the PDCA model for the operation of ISMS, the following tasks concerning server monitoring are performed. Which of the following is the appropriate combination of each task and each phase of the PDCA model?

[Tasks]

(1)Defining the specific objectives and procedures of server monitoring.(2)Objectively evaluating the details of the server monitoring work by a third party.(3)Monitoring the server according to the defined procedures.(4)Changing the server monitoring method as a corrective action for the problems that were found.
OptionPDCA

Explanation

P: (1), D: (3), C: (2), A: (4) — plan the monitoring, carry it out, have it evaluated, then correct what the evaluation found.

  • •P (Plan): (1) decides the objectives and procedures of server monitoring
  • •D (Do): (3) monitors the server by those procedures
  • •C (Check): (2) a third party evaluates the monitoring work objectively, as an audit or review does
  • •A (Act): (4) changes the monitoring method to correct the problems the check found

Each phase uses the output of the one before it: the procedures defined in P are what D follows, D's work is what C evaluates, and C's findings are what A corrects.

Answer (c)

Why not others:

  • •(a) — puts the evaluation (2) in Do and the monitoring (3) in Check; carrying out the procedure is Do, judging it is Check
  • •(b) — also swaps (2) and (3), and puts the corrective action (4) in Check and the monitoring (3) in Act
  • •(d) — puts the corrective action (4) in Check and the evaluation (2) in Act; correcting comes after evaluating

Key rule: In the ISMS PDCA cycle, Plan = define objectives and procedures, Do = operate by them, Check = monitor, measure and audit, Act = take corrective and improvement actions.

Security · AI-written, may contain errors

Practice this exam

This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.