ITPEC IT Passport Legal Affairs Questions with Answers — Page 2

Legal Affairs

100 questions · IT Passport · 51–100

Oct 2018 · Question 79

Which of the following is an explanation of compliance management?

a)It is a business process of monitoring and checking whether the business management is adequate and appropriate, so as to maintain the legitimacy of the business activities towards the shareholders.b)It is a business process of holding accountability to the shareholders and other stakeholders for the operational activities and business performance.c)It is a business process of implementing rules, manuals, and checking systems based on business ethics, and performing business activities in accordance with legal requirements and social norms.d)It is a business process of providing investors and analysts with accurate management information necessary for making investment decisions, on a timely and continuous basis.

IPA 2026 · Question 1

Concerning the handling of products created by using generative AI, which of the following lists all and only the cases that may require permission from the copyright holder of an existing copyrighted work?

AMusic was generated by using generative AI so as to obtain music similar to the songs of a favorite artist, and the music was uploaded to the Internet and released free of charge.BMusic was generated by using generative AI so as to obtain music similar to the songs of a favorite artist, and the music was stored on one’s own PC and listened to privately.CWhen music was generated by using generative AI, music similar to the songs of a favorite artist happened to be generated, so it was stored on one’s own PC and listened to privately.

a)Ab)A, Bc)A, B, Cd)B, C

IPA 2026 · Question 5

An application for a new business model concerning corporate advertising using the Internet was filed as intellectual property, and the business model was implemented as a computer system. Which of the following is the law that protects this business model as intellectual property?

a)Design Actb)Utility Model Actc)Copyright Actd)Patent Act

IPA 2026 · Question 11

At a fan meeting of a professional soccer team, a popular player was photographed signing autographs in a suit, and the photographs were printed and sold at a flea market. Which of the following is the most appropriate right held by the player that may be infringed by this act?

a)Industrial design rightb)Trademark rightc)Copyrightd)Right of publicity

IPA 2026 · Question 13

Which of the following is the most appropriate description of anonymously processed information as defined in the Act on the Protection of Personal Information?

a)Information obtained by processing statistical information published by the Ministry of Health, Labour and Welfare, the Statistics Bureau of the Ministry of Internal Affairs and Communications, and others for the company’s own use, and giving it new value by linking it with information held by the companyb)Information in which the names in personal information are anonymized on the basis of certain rules, while restoration to the original personal information is ensuredc)Information that is created by anonymizing personal information by a method specified in laws and regulations so that it cannot be restored, and that can be utilized under certain rules without the consent of the persond)Information collected from users in such a way that, when personal information is collected, names are not obtained and individuals can be identified by other information such as the Individual Number

IPA 2026 · Question 21

Which of the following explains the legislative purpose of the Basic Act on Cybersecurity?

a)Defining acts of unauthorized access to computers, prohibiting those acts and setting penalties for them, and aiming to maintain order in network communicationsb)Establishing practical norms for putting in place and operating appropriate controls concerning information security, and encouraging companies and other organizations to promote effective information security measuresc)Establishing basic principles for measures to defend against acts such as unauthorized intrusion into computers through information and communications networks, clarifying matters such as the responsibilities of the national government and local governments, and aiming to promote the measures comprehensively and effectivelyd)Ensuring the business interests of companies and other organizations by regulating acts such as disabling technological restriction measures that prevent the copying of digital content

IPA 2026 · Question 29

In outsourcing program development work, which of the following is an appropriate explanation of the case where there is no special arrangement concerning the rights and obligations of the orderer and the contractor in a contract for work?

a)When the contractor further has another vendor undertake part of the work, it must obtain the orderer’s consent in advance.b)When the completed program has a defect, the orderer can request the repair of the defect at any time.c)The orderer becomes obligated to pay the remuneration at the time when it receives the delivery of the program.d)Before the program is completed, the orderer can cancel the contract for work at any time without compensating the contractor for damages.

IPA 2025 · Question 1

Company A entrusts part of its work to Company B under a contract for work. Among the working arrangements (i) through (iii), which of the following lists all and only the states that are regarded as so-called disguised contracting?

(i)Employees of Company B are performing the work agreed in the contract for work at Company A’s premises, under the direction and orders of a person in charge at Company A.(ii)Employees of Company B are performing the work agreed in the contract for work at Company A’s premises, under the direction and orders of a person in charge at Company B.(iii)Employees of Company B are performing the work agreed in the contract for work at Company B’s premises, under the direction and orders of a person in charge at Company A.

a)(i)b)(i), (ii)c)(i), (iii)d)(ii), (iii)

IPA 2025 · Question 2

Which of the following is the most appropriate guideline standard that was additionally established on the basis of the existing information security management system standards, for building an information security management structure suited to cloud services?

a)ISO 14001b)JIS Q 15001c)ISO/IEC 27017d)ISO 9001

IPA 2025 · Question 3

The government has formulated the “Basic Plan for the Advancement of Public and Private Sector Data Utilization” prescribed in the Basic Act on the Advancement of Public and Private Sector Data Utilization, and is working to promote the publication and utilization of public and private sector data. Among the following organizations, which of the following lists all and only those that hold public and private sector data?

APrefectural officeBUniversityCElectric power companyDIncorporated administrative agency

a)A, B, Cb)A, B, C, Dc)A, B, Dd)A, C, D

IPA 2025 · Question 6

The Act on Regulation of Transmission of Specified Electronic Mail is a law that regulates the sending of unsolicited advertising e-mails. Among the following examples of sending e-mails by a person in charge at a company, which of the following can be subject to the regulation of the Act on Regulation of Transmission of Specified Electronic Mail?

a)After it was confirmed that there was no expression of intent to refuse to receive advertising e-mails, an advertising e-mail was sent to a published e-mail address of a company.b)Thinking that it would be enough to stop sending after a notice of refusal comes from the recipient, an advertising e-mail was sent.c)Thinking that there was no problem because the contents were business communication and a billing, an e-mail was sent without the consent of the recipient.d)To a person in charge at a company with which there had been a business relationship for many years, an advertising e-mail about a product was sent because a new version of the product that had been delivered so far was completed.

IPA 2025 · Question 12

Which of the following is an explanation of a service mark under the Trademark Act?

a)It is a trademark that a company displays in order to distinguish the company itself from other companies.b)It is a trademark that manufacturers and sellers display in order to distinguish the goods they provide from the goods of other companies.c)It is a trademark that is displayed in order to distinguish the goods of a private brand developed by a large-scale retailer from the goods of other companies.d)It is a trademark that transport companies, financial companies, and others display in order to distinguish the services they provide from the services of other companies.

IPA 2025 · Question 16

Among the descriptions concerning the handling of another person’s e-mail user ID and password, which of the following lists all and only the acts that are regulated by the Act on the Prohibition of Unauthorized Computer Access?

AProviding them to a third party without a justifiable reason and without the owner’s permission.BCreating malware that disables other people’s e-mail user IDs and passwords.CUsing them without the owner’s permission to read e-mail on the mail server.

a)A, B, Cb)A, Cc)B, Cd)C

IPA 2025 · Question 30

Concerning copyright, which of the following is the appropriate combination of words to be inserted into blanks A and B in the description below?

A is subject to protection under the Copyright Act, but B is not.

a)AlgorithmOperation manualb)AlgorithmCommunication protocolc)Source programOperation manuald)Source programCommunication protocol

IPA 2024 · Question 2

Which of the following is the law that establishes basic principles for systematically taking defensive measures across the entire nation against acts such as illegally intruding into an information system and stopping services to cause social disruption, and clarifies the responsibilities of the national government and others?

a)Whistleblower Protection Actb)Basic Act on Cybersecurityc)Act on the Prohibition of Unauthorized Computer Accessd)Provider Liability Limitation Act

IPA 2024 · Question 10

Which of the following is the most appropriate description concerning shared data with limited access as specified in the Unfair Competition Prevention Act?

a)Technical or business information that is stored on the premise that it is provided to a specific third party only once is shared data with limited access.b)Technical or business information that is accumulated in a significant amount and managed by electromagnetic means as information to be provided to specific third parties (excluding information that is managed as a secret) is shared data with limited access.c)Technical or business information that is physically managed in a safe or the like in order to be provided to specific third parties is shared data with limited access.d)A trade secret as defined in the Unfair Competition Prevention Act is shared data with limited access.

IPA 2024 · Question 11

Which of the following is an appropriate measure aimed at standardizing the operational management of organizations and processes related to quality, and improving the quality and efficiency of management?

a)Introduction of ISMSb)Introduction of ISO 9001c)Introduction of ITILd)Acquisition of the PrivacyMark

IPA 2024 · Question 12

Among the seven “AI Social Principles” specified in the “Social Principles of Human-Centric AI,” one of the guidelines concerning AI, which of the following is the most appropriate description concerning the “Principle of Innovation”?

a)So that people also evolve together with the development of AI, internationalization and diversification are pushed forward, and collaboration between the public and private sectors, such as universities, research institutions, and companies, and the flexible movement of human resources are promoted.b)As for the results brought about by the use of AI, the parties involved in the development, provision, and use of AI share and bear responsibility according to the characteristics of the problem.c)Service providers give users an appropriate explanation of the fact that AI is used, the methods of obtaining and using data, and the appropriateness of the results.d)In order not to create information-disadvantaged people, education on the use of AI and information literacy is given in early childhood education and in primary and secondary education.

IPA 2024 · Question 27

The Act on the Protection of Personal Information stipulates acts by which personal data may be provided even without obtaining the consent of the person in advance. Which of the following lists all and only the cases that correspond to these acts?

AHaving seen the employee ID card that a person who was unconscious due to an accident was carrying, the hospital to which the person was taken called the person’s company, so the person in charge of general affairs gave the person’s home telephone number.BHaving been asked by an employee of an insurance company who wanted to solicit new subscribers, the person in charge of general affairs handed over a list of the names and departments of new employees.CIn response to a request based on laws and regulations from an investigative agency that is promoting measures to prevent similar crimes, the person in charge of general affairs provided personal information about victims of financial crimes such as fraudulent remittances.

a)Ab)A, Cc)B, Cd)C

IPA 2024 · Question 32

Which of the following is an appropriate description concerning the employment relationship of a dispatched worker in worker dispatching?

a)There is an employment relationship with the client company, and there is none with the dispatching company.b)There is an employment relationship with the dispatching company, and there is none with the client company.c)There is an employment relationship with both the dispatching company and the client company.d)There is no employment relationship with either the dispatching company or the client company.

IPA 2024 · Question 35

Which of the following is the most appropriate description concerning a utility model?

a)A manufacturing method that has never existed before is eligible for a utility model.b)Only creations of technical ideas utilizing the laws of nature that are highly advanced are eligible for a utility model.c)Only those that have passed an examination of novelty are registered as utility models.d)A new product devised by combining multiple articles is eligible for a utility model.

IPA 2023 · Question 2

Among A through C below, which of the following lists all and only those that correspond to works as defined by the Copyright Act?

AA recording of a lecture given without a manuscriptBThe arrival times of buses printed in a timetableCA highly creative technical invention

a)Ab)A, Cc)B, Cd)C

IPA 2023 · Question 9

Which of the following lists all and only the appropriate purposes of establishing a social media policy?

ATo set out the attitudes, rules, and so on for when the company uses social media, so that people outside the company can understand themBTo show the rules for when the officers and employees belonging to the company use social media, whether for business or private purposesCTo show the conditions for when social media outlets conduct interviews with or make inquiries to the company, and the rules for handling them at the point of contact

a)Ab)A, Bc)A, Cd)B, C

IPA 2023 · Question 10

Which of the following is the most appropriate description concerning a forum standard?

a)A standard that guarantees that industrial products are within the specified ranges of quality, dimensions, functions, and shapesb)A standard that is established at a public standardization body through transparent and fair procedures, upon agreement among the parties concernedc)A standard that has become a de facto industry standard as a result of a specification developed by a specific company being widely usedd)A standard that is created by an organization that multiple companies and other parties with an interest in a specific field have come together to form

IPA 2023 · Question 15

Among the inappropriate acts A through D related to passwords, which of the following lists all and only the acts that are regulated by the Act on the Prohibition of Unauthorized Computer Access?

AIn order to have a colleague perform one’s work on one’s behalf, one’s own ID and password for accessing the internal database were given to the colleague.BA memo of one’s own password for accessing the internal database was stuck on one’s own PC.CA document attached to an e-mail was imported into a PC. The password for viewing the document was given to a person who does not have the right to view the document.DAnother person’s ID and password registered on a popular shopping site were given to a third party without permission.

a)A, B, C, Db)A, C, Dc)A, Dd)D

IPA 2023 · Question 22

Which of the following corresponds to a prepaid payment instrument under the Payment Services Act?

a)A service that enables bank transfers and remittances from a deposit account on a websiteb)Crypto assets that can be used as electronic currency on the Internetc)Gift certificates with no expiration date that can be used in common at department stores, shops, and other such places nationwided)Points that are granted at the time of purchasing products at a store or other such place, and that can be used as payment for the next purchase at the same store

IPA 2023 · Question 29

Which of the following is the law that regulates the act of selling programs that disable the copy protection of video software without a justifiable reason, in order to prevent unfair sales practices?

a)Trademark Actb)Act on Specified Commercial Transactionsc)Act on the Prohibition of Unauthorized Computer Accessd)Unfair Competition Prevention Act

IPA 2023 · Question 34

Among the descriptions A through C, which of the following lists all and only those that are stated in the “Social Principles of Human-Centric AI” as matters that society should keep in mind in order for AI to be accepted by society and used appropriately?

AIn using AI, AI itself must be made more advanced so that AI, rather than people judging and deciding how to use it, can judge and decide autonomously.BThe use of AI must not infringe on the fundamental human rights guaranteed by the Constitution and international norms.CIn order to spread AI at an early stage, systems for people who have advanced information literacy must be realized first, and thereafter AI must be developed in stages so that systems that let information-disadvantaged people also enjoy the benefits of AI are realized.

a)A, Bb)A, B, Cc)Bd)B, C

IPA 2022 · Question 1

Among the descriptions A through C concerning copyrights and patent rights, which of the following lists all and only the appropriate descriptions?

AWhen two similar things happen to be created by chance, the patent rights that come with the inventions are granted to both, but the copyright is granted to only one of the authors.BIn the case of software, both the patent right and the copyright are granted for the source program list.CAcquiring a patent right requires an application and registration, but a copyright requires no application or registration.

a)A, Bb)Bc)B, Cd)C

IPA 2022 · Question 9

Among the inappropriate acts A through C, which of the following lists all and only the acts that are regulated by the Act on the Prohibition of Unauthorized Computer Access?

AProviding another person’s e-mail user ID and password to a third party without a justifiable reason and without the owner’s permission.BUsing another person’s e-mail user ID and password without the owner’s permission to read that person’s e-mail on the mail server via a network.CCreating malware that disables e-mail user IDs and passwords so that the mail server cannot be accessed.

a)A, Bb)A, B, Cc)Bd)B, C

IPA 2022 · Question 13

Which of the following is an appropriate document for which disclosure can be requested on the basis of the Act on Access to Information Held by Administrative Organs?

a)Legislative documents created and held by legislative bodies such as the National Dietb)Judicial documents created and held by judicial bodies such as the Supreme Courtc)Internal documents created and held by companies listed on a stock exchanged)Administrative documents created and held by administrative organs such as the Ministry of Internal Affairs and Communications

IPA 2022 · Question 14

Which of the following is the most appropriate description concerning a shrink-wrap agreement, which is one of the license agreements for commercially available software packages and the like?

a)Once the package of the software package is opened, the agreement is concluded even if the license conditions were not understood.b)Even if the package of the software package is opened, the agreement can be invalidated within a certain period.c)Even if the package of the software package is opened, the agreement becomes invalid unless the use of the software is started within a certain period from the purchase.d)Even if the package of the software package is not opened, the agreement is concluded once a certain period has passed from the purchase.

IPA 2022 · Question 16

Which of the following is an appropriate description concerning the My Number?

a)It is assigned only to persons who hold Japanese nationality, including those residing overseas.b)A company may use it as an employee number.c)By making an application, a person can obtain the My Number of his or her choice.d)An assigned My Number cannot be changed freely.

IPA 2022 · Question 20

To represent certain data, the use of either one (1) JAN code or one (1) QR code is being considered. When the one with the larger maximum amount of data that can be represented is adopted, which of the following is an appropriate result of the consideration?

a)The JAN code is adopted.b)The QR code is adopted.c)It cannot be decided because the maximum amount of data changes depending on the content to be represented.d)It cannot be decided because the maximum amount of data that can be represented is the same.

IPA 2022 · Question 21

The “Social Principles of Human-Centric AI” established by the government state that a society that respects three (3) values as its philosophy and pursues their realization should be built. Which of the following lists all and only the visions of society whose realization should be pursued?

AA sustainable societyBA society in which people with diverse backgrounds can pursue diverse forms of happinessCA society in which humans are freed from all kinds of laborDA society in which human dignity is respected

a)A, B, Cb)A, B, Dc)A, C, Dd)B, C, D

IPA 2022 · Question 23

Which of the following is the most appropriate description concerning opt-out?

a)An SNS operator delivered e-mails introducing new functions only to the users who requested the delivery of notification e-mails.b)A user of a residential map found that his or her name was printed at the location of his or her home on the map, and therefore contacted the company that produced the residential map and had the listing stopped.c)A user of mail-order sales was proceeding with the operations to purchase a product on a website, but closed the screen and canceled the purchase because the payment procedure was troublesome.d)When analyzing customer data for sales forecasting, a drugstore operator replaced information such as names and addresses with random values so that customers could not be identified.

IPA 2022 · Question 27

Which of the following corresponds to “special care-required personal information,” which is defined in the Act on the Protection of Personal Information as requiring particular care in its handling?

a)Academic backgroundb)Nationalityc)Amount of assetsd)Creed

IPA 2022 · Question 29

Which of the following is the most appropriate description concerning countermeasures against money laundering?

a)In financial transactions, the purpose of transactions and identity verification at the time of opening an account are thoroughly carried out, and transactions are monitored for whether the source of the funds is suspicious.b)In printing banknotes, copying is made difficult by using techniques such as characters and lines that are difficult to reproduce with a copier, and holograms in which a picture emerges when the banknote is tilted.c)In collecting taxes, the profits of a subsidiary in a foreign country are deemed to have been paid as dividends to the parent company in the home country, and are taxed in the home country.d)In investing, the risk of a large loss caused by a single event is reduced by combining multiple financial products that differ in characteristics such as safety and profitability.

IPA 2021 · Question 7

Which of the following lists all and only the items that can be subject to protection under the Copyright Act?

AFree software published on the InternetBAn operation manual for a databaseCA programming languageDAn algorithm of a program

a)A, Bb)A, Dc)B, Cd)C, D

IPA 2021 · Question 9

Among the inappropriate acts A through C, which of the following lists all and only the acts that are regulated by the Unfair Competition Prevention Act?

AThe act of using the personal information of applicants for a campaign for other purposes without the applicants’ permissionBThe act of illegally obtaining another person’s ID and password, and using them to access a computer via the InternetCThe act of using a domain name similar to another company’s product name or company name in order to obtain an unfair profit

a)Ab)A, Cc)Bd)C

IPA 2021 · Question 12

Among descriptions A through C concerning worker dispatching, which of the following lists all and only the appropriate ones?

ARegardless of the type of dispatch contract, the client company selects the dispatched worker.BAfter the period of employment with the dispatching company ends, the client company may employ a person who was a dispatched worker.CThe client company pays the wages of the dispatched worker.

a)Ab)A, Bc)Bd)B, C

IPA 2021 · Question 17

Among cases A through C that occurred in services provided by a provider, which of the following lists all and only those that can be the subject of the provider’s responsibility for response under the Provider Liability Limitation Act?

APersonal information such as a name was posted on an electronic bulletin board, and the rights of an individual were infringed.BInfection with malware was caused by an attached file of a received e-mail.CA user ID and a password were used without permission, and a shopping site was accessed.

a)Ab)A, B, Cc)A, Cd)C

IPA 2021 · Question 30

Among the inappropriate acts A through C related to the handling of information, which of the following lists all and only those that correspond to the prohibited acts defined in the Act on the Prohibition of Unauthorized Computer Access?

AAnother person’s user ID and password written in a notebook that was found in the office were used without permission to log in to the company’s server via the network, and the personnel evaluation information stored there was viewed.BWhen a colleague left the desk, personnel evaluation information that was displayed on the colleague’s PC screen, and that one has no right to access, was viewed.CA USB memory containing personnel evaluation information that was kept in the department’s storage cabinet was taken out without the permission of the superior, and the personnel evaluation information was viewed on one’s own PC.

a)Ab)A, Bc)A, B, Cd)A, C

IPA 2021 · Question 32

Among A through C, which of the following lists all and only those that are specified in the Basic Act on Cybersecurity?

AThe responsibilities that the national government and local governments should fulfill concerning cybersecurityBWhat citizens should endeavor to do concerning cybersecurityCThe basic principles for the promotion of measures concerning cybersecurity

a)A, Bb)A, B, Cc)A, Cd)B, C

IPA 2020 · Question 2

Companies are required to practice so-called compliance, conducting their activities in accordance with basic rules such as social norms, not to mention complying with laws and regulations, in order to live up to the trust of society. Among A through D, which of the following lists all and only the items that must be considered as compliance?

AObservance of traffic rulesBProhibition of entertaining public officialsCObservance of the company’s own rules of employmentDRespect for the intellectual property rights of others

a)A, B, Cb)A, B, C, Dc)A, C, Dd)B, C, D

IPA 2020 · Question 12

At Company A, two forms are being compared and considered for the development of a program whose work up to the design was done by Company A: a form in which the development is entrusted to Company B on the basis of a contract for work, and a form in which it is performed by Mr. C, who is dispatched from Company B on the basis of a dispatch contract. When no provision concerning the ownership of the copyright of the developed program is specified in the contract between the companies, which of the following shows to whom the copyright belongs?

a)Under the contract for work, it belongs to Company A, and under the dispatch contract, it belongs to Company A.b)Under the contract for work, it belongs to Company A, and under the dispatch contract, it belongs to Mr. C.c)Under the contract for work, it belongs to Company B, and under the dispatch contract, it belongs to Company A.d)Under the contract for work, it belongs to Company B, and under the dispatch contract, it belongs to Mr. C.

IPA 2020 · Question 13

AAnother person’s ID and password written in a notebook that was found in the office were used without permission to log in to the company’s server via the network, and the personnel evaluation information stored on the server was viewed.BIn order to sneak a look at personnel evaluation information that one has no right to view, another person’s network ID and password were obtained without permission and recorded in one’s own notebook.CA USB memory containing personnel evaluation information that was kept in the department’s storage cabinet was taken out without the permission of the superior, connected directly to one’s own PC, and the personnel evaluation information was copied.

a)Ab)A, Bc)A, B, Cd)B, C

IPA 2020 · Question 16

Among the various results A through C produced in developing a new product, which of the following lists all and only those that can be subject to protection under the Patent Act?

AAn original invention devised to achieve a functionBA design of the new product, such as its shape, pattern, and color, created with an innovative ideaCA brand name of the new product, devised for the announcement of the new product

a)Ab)A, Bc)A, B, Cd)A, C

IPA 2020 · Question 20

Worker dispatching is divided into two types: ordinary dispatching, and temp-to-perm dispatching, which anticipates future employment. In concluding a worker dispatch contract of the former type, which of the following is an appropriate condition for accepting a dispatched worker that the client company requests from the dispatching company?

a)Specification of the skills that the candidate should haveb)Specification of the age and gender of the candidatec)A prior interview of the candidate by the client companyd)Prior submission of the candidate’s résumé to the client company

IPA 2020 · Question 25

The Basic Act on Cybersecurity is a law that establishes basic principles concerning measures related to cybersecurity, and specifies the responsibilities, etc. of the national government and local governments. Among the descriptions A through D, which of the following lists all and only those that this law specifies as basic measures of the national government?

AEnsuring cybersecurity in the administrative organs, etc. of the national governmentBPromotion of cybersecurity-related industries and strengthening of their international competitivenessCControl of cybersecurity-related crimes and prevention of the spread of damageDSecuring of human resources related to cybersecurity

a)Ab)A, Bc)A, B, Cd)A, B, C, D