IPA IP 2026 Question 83
A question IPA Japan published in 令和8年度 ITパスポート試験 公開問題 問83, translated into English. ITPEC is based on the same exams.
Among the information security measures A through C applied to PCs in the workplace, which of the following lists all and only the appropriate measures for preventing malware infection, in addition to installing anti-malware software?
Explanation
Only applying OS security patches — of the three, only patching closes the holes that malware uses to get in.
- •A: Much malware infects a PC by exploiting a vulnerability in the OS. A security patch (update module) fixes that vulnerability, so applying patches directly prevents infection. Appropriate.
- •B: A hard disk password stops someone from booting or reading the disk without the password, for example after the PC is stolen. Malware arrives through e-mail, websites or USB memory while the legitimate user is working, and the password does nothing against it.
- •C: A strong login password stops other people from logging in to the PC. It protects against unauthorized access, not against malware that the logged-in user opens.
Answer (a)
Why not others:
- •(b) — adds B, which protects the disk from physical theft or unauthorized booting, not from infection
- •(c) — B alone, the anti-theft measure, without the patching that actually blocks infection
- •(d) — C alone protects against password guessing and unauthorized logins, not against malware
Key rule: Match each measure to the threat it counters: patches and anti-malware software against malware; passwords against unauthorized access; disk passwords and encryption against theft or loss.
Security · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.