60 questions / 10 random questions
Random questions, instant feedback, and review for missed questions.
View recommended IT Passport resources →
Which best describes personal information under personal data protection law?
Answer: Information that can identify a specific individual
Personal information is data that can identify a specific individual, such as name or birth date, and must be handled carefully.
How are computer programs treated under copyright law?
Answer: They are protected as copyrighted works
Programs are protected as works under copyright law; it is the expression, not the underlying idea, that is protected.
Which law regulates logging into a system using someone else's ID and password without permission?
Answer: The unauthorized computer access law
The unauthorized access law prohibits acts such as using another person's credentials without authorization.
In the PDCA cycle, which stage evaluates and checks the results against the plan?
Answer: Check
PDCA cycles through Plan, Do, Check, and Act for continuous improvement; Check evaluates the results.
In SWOT analysis, which represents an internal strength of the organization?
Answer: Strength
SWOT analyzes strengths/weaknesses (internal) and opportunities/threats (external); strength is an internal positive.
Which metric shows how much profit is gained relative to the amount invested?
Answer: ROI (Return on Investment)
ROI divides profit by the investment amount to evaluate investment efficiency.
Which management approach fundamentally redesigns business processes?
Answer: BPR (Business Process Reengineering)
BPR fundamentally rethinks and redesigns existing business processes to improve efficiency and value.
Which term means conducting business in compliance with laws and social norms?
Answer: Compliance
Compliance means acting in accordance with laws, social norms, and ethics.
Which term refers to transforming business models and operations using digital technology?
Answer: DX (Digital Transformation)
DX uses digital technology to transform products, services, business models, and organizations to gain competitiveness.
Which technique decomposes project work hierarchically for management?
Answer: WBS
A WBS (Work Breakdown Structure) breaks work into a hierarchy, easing estimation and progress tracking.
Which development approach uses short iterations and adapts flexibly to change?
Answer: Agile development
Agile development repeats short iterations and adapts flexibly to changing requirements; Scrum is a common example.
Which document agrees on the service quality level between an IT service provider and the customer?
Answer: SLA (Service Level Agreement)
An SLA documents agreed quality targets such as availability and response time between provider and customer.
Which activity independently checks and evaluates whether systems are properly operated and managed?
Answer: Systems audit
A systems audit has an independent auditor assess the reliability, security, and efficiency of information systems.
Which chart shows scheduled and actual work as horizontal bars over time for progress management?
Answer: Gantt chart
A Gantt chart shows each task start and end as a horizontal bar, making progress easy to see.
How many values can one binary digit (bit) represent?
Answer: 2 values
One bit represents 0 or 1 (two values); n bits can represent 2 to the power n values.
Which diagram expresses a processing procedure using shapes and arrows?
Answer: Flowchart
A flowchart links process, decision, and I/O symbols with arrows to express an algorithm.
Which is the central device that performs computation and control in a computer?
Answer: CPU (central processing unit)
The CPU performs computation and control, interpreting and executing program instructions.
Which basic software manages hardware and provides an environment for applications?
Answer: OS (operating system)
An OS manages hardware resources and provides a common execution platform for applications.
Which term refers to a network connecting a relatively small area such as within a building?
Answer: LAN
A LAN (Local Area Network) covers a small area like a building, while a WAN connects distant locations.
Which URL prefix indicates encrypted web communication that prevents eavesdropping and tampering?
Answer: https://
HTTPS encrypts communication with TLS to prevent eavesdropping and tampering, whereas HTTP is not encrypted.
Which cryptographic method uses the same key for encryption and decryption?
Answer: Symmetric-key cryptography
Symmetric-key cryptography uses the same key for both encryption and decryption; public-key uses two different keys.
Which authentication requires a one-time code on a phone in addition to a password at login?
Answer: Multi-factor authentication
Multi-factor authentication combines different factors (knowledge, possession, biometrics) to strengthen security.
Which attack uses emails impersonating a legitimate organization to lure users to fake sites and steal credentials?
Answer: Phishing
Phishing uses fake messages posing as legitimate senders to lure victims to fake sites and steal credentials.
Which mechanism monitors traffic at a network boundary and blocks unauthorized communication?
Answer: Firewall
A firewall controls traffic at the network boundary and blocks communication that is not permitted.
In a relational database, which item is set to uniquely identify each row?
Answer: Primary key
A primary key uniquely identifies each record and allows no duplicates or NULL values.
Which technology lets computers learn rules and patterns from large amounts of data?
Answer: Machine learning
Machine learning is a core AI technique that learns patterns from data to make predictions or classifications.
Which concept connects various physical things to the internet to exchange information?
Answer: IoT
IoT (Internet of Things) connects devices like appliances and sensors to the internet for data collection and remote control.
Which cloud service model delivers software functionality over the internet?
Answer: SaaS
SaaS delivers ready-made software over the internet; IaaS provides infrastructure and PaaS provides a platform.
Which term refers to important metrics such as revenue growth rate or customer satisfaction that measure progress toward business goals?
Answer: KPI
A KPI is a key performance indicator used to measure progress and results toward goals.
Which tool organizes customers, value propositions, and revenue streams on one page to examine a business model?
Answer: Business Model Canvas
The Business Model Canvas maps value propositions, customers, channels, revenue, and related elements to view the business structure.
Which approach uses data analysis to make decisions based on evidence rather than only intuition or experience?
Answer: Data-driven management
Data-driven management uses collected and analyzed data for decision-making and improvement activities.
Which law regulates transactions so ordering businesses do not unfairly reduce payments or delay payment to small and medium contractors?
Answer: Act on Fair Transactions with Small and Medium-Sized Entrusted Business Operators
This law aims to ensure fair entrusted transactions by preventing practices such as unfair payment reductions and delayed payment.
Which development approach builds working software in short cycles and improves it using user feedback?
Answer: Agile development
Agile development delivers value in short iterations and incorporates feedback to respond to change.
Which matrix organizes who is responsible, accountable, consulted, and informed for each project task?
Answer: RACI chart
A RACI chart clarifies role assignments and reduces ambiguous responsibility or missed communication.
Which plan is prepared in advance to continue or quickly restore critical business during disasters or major failures?
Answer: BCP (Business Continuity Plan)
A BCP defines arrangements and procedures for continuing or restoring critical business during emergencies.
Which function centrally receives user inquiries and incident reports and manages response status?
Answer: Service desk
A service desk acts as a single point of contact for inquiries, incidents, and requests and manages their handling.
When using generative AI for work, which information is most inappropriate to input?
Answer: Unpublished customer data or confidential information
Entering confidential or personal data into generative AI may cause information leakage, so usage rules and data classification must be followed.
Which task fixes inconsistent notation and missing values to make data easier to analyze?
Answer: Data cleansing
Data cleansing corrects duplicates, missing values, inconsistent notation, and outliers to improve data quality for analysis.
Which interface specification lets applications exchange functions or data?
Answer: API
An API is an interface specification that lets other programs use software functions or data.
Which concept does not automatically trust even internal networks and continuously verifies users and devices?
Answer: Zero trust
Zero trust continuously verifies access regardless of internal or external location, using authentication, authorization, and device state.
A subscription service is losing members. Which metric most directly measures improvement in continued use?
Answer: Churn rate
Churn rate is the percentage of customers who cancel during a period, so it directly represents retention. Comparing it under consistent conditions shows whether the initiative worked.
A service costs 8,000 yen to acquire one customer, while that customer generates 24,000 yen in profit over the relationship. Which statement best describes profitability?
Answer: Lifetime value exceeds acquisition cost, leaving room to invest after considering other costs
Because customer lifetime value (LTV) exceeds customer acquisition cost (CAC), further acquisition may be viable. Operating and other costs must still be included in the final decision.
Monthly fixed costs are 1.2 million yen, the selling price is 5,000 yen per item, and variable cost is 3,000 yen per item. What is the monthly break-even sales volume?
Answer: 600 items
Contribution margin per item is 5,000 minus 3,000, or 2,000 yen. Dividing the 1.2 million yen fixed cost by 2,000 gives 600 items.
A public web application form is being improved. Which action is most appropriate for accessibility?
Answer: Make it operable by keyboard and provide screen-reader labels for fields
Keyboard operation and proper labels support users who cannot rely on a mouse or visual information. Status should also be conveyed through text or symbols, not color alone.
A company is considering moving a payroll system that is not a competitive differentiator to an external service. What should be emphasized in the decision?
Answer: Compare total cost, required functions, security, and migration or exit constraints
An outsourcing decision should compare total cost and risk, including operation, integration, migration, training, and data export at exit, while confirming fit with business requirements.
A company wants to compare several system procurement proposals fairly. Which method is most appropriate?
Answer: Define criteria and weights for price, function, and operation before scoring
Predefined criteria and weights allow consistent scoring, reduce arbitrary decisions, and make the rationale explainable across cost, quality, and operation.
A company wants IT to support lower-carbon delivery operations. Which metric best measures the effect?
Answer: CO2 emissions per delivery
Tracking emissions per delivery reduces distortion from changes in delivery volume and helps assess improvements from measures such as route optimization.
Stakeholders need a clear shared definition of 'reservation complete' for a system under development. Which action is most appropriate?
Answer: Specify acceptance criteria such as valid input, inventory allocation, and confirmation
Agreeing on testable acceptance criteria in advance reduces interpretation gaps and enables objective verification of completion.
A request for an important new feature appears during development. What should project management do first?
Answer: Assess impact on cost, schedule, quality, and requirements, then submit it for approval
A change request should be impact-assessed and approved by stakeholders before plans are updated, preventing uncontrolled scope growth.
A project must prioritize risk responses with a limited budget. Which assessment is fundamental?
Answer: Evaluate both probability and impact
Risk significance is commonly assessed by combining likelihood and impact, then considering response cost and urgency to prioritize action.
Similar failures recur monthly in a business system. Which activity is most appropriate for preventing recurrence?
Answer: Link incident records, analyze the root cause, and manage a permanent fix
Beyond incident recovery, problem management analyzes patterns and root causes and tracks permanent corrective action to prevent recurrence.
Backups are recorded as successful every day. What is the best way to verify actual disaster recovery capability?
Answer: Periodically restore in an isolated environment and verify time and data integrity
A successful backup log does not guarantee restorability. Recovery exercises verify data integrity, recovery time, and whether RPO and RTO can be met.
A new version of a company-wide business app will be released. Which method best limits impact if it fails?
Answer: Pilot with some users, monitor it, prepare rollback, and expand gradually
A pilot limits exposure, and monitoring supports gradual expansion. Predetermined rollback criteria and procedures speed recovery if trouble occurs.
An employee reuses one password across multiple web services. Which improvement is most appropriate?
Answer: Use a password manager for unique strong passwords and enable MFA
Unique passwords prevent one service breach from cascading to others. A password manager plus MFA improves both security and usability.
A ransom note appears on an employee PC and filenames in a shared folder begin changing. What is the most appropriate first response?
Answer: Isolate the device from the network and immediately report through the defined channel
To contain ransomware, first disconnect and isolate the device, then report under the incident response procedure. Evidence preservation and recovery should follow authorized direction.
After transferring departments, an employee can still access the previous department's customer system. What is the best correction?
Answer: Promptly remove unnecessary role-based access and review permissions regularly
Under least privilege, permissions must change with transfers, departures, and role changes. Periodic reviews detect access that was left behind.
A company uses a cloud provider's managed database service. Which responsibility most appropriately belongs to the customer?
Answer: Configure user access properly and classify and protect stored data
Cloud security is shared. The provider normally manages physical facilities, while the customer manages accounts, permissions, configurations, and the data placed in the service.
After customer data was copied for analysis, field meanings and transformation history became unclear. Which prevention is most appropriate?
Answer: Manage data definitions and lineage from source through transformation to use
Shared definitions such as a data catalog and lineage that traces sources, transformations, and destinations reduce misunderstanding and quality problems.
A generative-AI market summary contains figures with unclear sources. What should be done before using it in a business document?
Answer: Verify figures and context against reliable primary sources and cite them
Generative AI can produce plausible but false or outdated content. The user must verify against primary sources and state the source and verification date.
In an online meeting, video and audio appearing to be an executive urgently request a payment. What is the most appropriate response?
Answer: Hold the payment and verify identity through a registered separate channel and approval process
Deepfakes mean video and audio alone cannot prove identity. Verification must use an independent contact path, and payment approval controls must still be followed.