IPA IP 2026 Question 94

Topic: Security

A question IPA Japan published in 令和8年度 ITパスポート試験 公開問題 問94, translated into English. ITPEC is based on the same exams.

When information security measures are classified into “technical security measures,” “human security measures,” and “physical security measures,” which of the following is an appropriate example of “physical security measures”?

Explanation

A backup system at a remote location — physical security measures protect places and equipment.

The three categories differ by what the measure acts on:

CategoryActs onExamples
Technicalsystems and data, through technologyanti-malware software, encryption, access control, firewalls
Humanpeople and their behaviourrules, training, awareness, non-disclosure agreements
Physicalplaces and equipmentlocks, entry control, disaster-resistant facilities, a backup site

A second system at a distant site protects the service against physical threats such as an earthquake, fire or flood by keeping a set of equipment out of their reach, so it is a physical measure.

Answer (b)

Why not others:

  • •(a) — rules with penalties and regular training act on people: a human security measure
  • •(c) — telling employees about attack methods and countermeasures is awareness education: a human security measure
  • •(d) — anti-malware software and its definition file are technology: a technical security measure

Key rule: Classify a security measure by what it acts on: people (human), systems and data through technology (technical), or places and equipment (physical).

Security · AI-written, may contain errors

Practice this exam

This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.