IPA IP 2025 Question 97

Topic: Security

A question IPA Japan published in 令和7年度 ITパスポート試験 公開問題 問97, translated into English. ITPEC is based on the same exams.

In information security, which of the following lists all and only the events in which availability was impaired?

AThe electronic payment system with related business partners was subjected to a DoS attack, and processing became impossible.BThe customer information in the customer information management system was operated with incorrect contents.CA server in the company was intruded into without authorization, and confidential information leaked.

Explanation

Only event A — availability means that authorized users can use the information and systems when they need them.

Match each event to the property it damages:

  • •A: the DoS attack stopped the payment system, so it could not be used when needed: availability is lost.
  • •B: the customer data was wrong, so it was no longer accurate and complete: integrity is lost, although the system kept running.
  • •C: confidential information reached unauthorized people: confidentiality is lost.

Answer (a)

Why not others:

  • •(b) — adds B, which is a loss of integrity
  • •(c) — B is integrity and C is confidentiality; neither is availability
  • •(d) — C is a leak, a loss of confidentiality

Key rule: Confidentiality = only authorized people see it, integrity = it is correct and complete, availability = it can be used when needed; a DoS attack is the classic loss of availability.

Security · AI-written, may contain errors

Practice this exam

This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.