Karinoya Learning Room

Qualifications · IT Passport Success Lab

System Strategy

Read the questions and explanations in English. The lectures (explanatory articles) are available in Japanese only.

View the Japanese version (with lectures) →

Q1 | IS strategy

Which of the following is the most appropriate description of an information systems strategy?

  1. A compilation of contact points and recovery procedures for when a failure occurs
  2. A policy under which each department chooses the software it needs to suit its own operations
  3. A statement, based on the business strategy, of what the information systems should be and how to realize them, from the viewpoint of overall optimization
  4. A schedule fixing, hour by hour, the day's work steps and assignees for a system under development
AnswerC. A statement, based on the business strategy, of what the information systems should be and how to realize them, from the viewpoint of overall optimization

An information systems strategy is a medium-to-long-term policy that, to realize the business strategy, sets out from a company-wide viewpoint, overall optimization, what the systems should be and how to achieve them; executives and the CIO are responsible for it. Department-by-department selection is partial optimization, not strategy. The day's work steps are an operations plan and recovery procedures are failure-response procedures; neither is a strategy.

Q2 | EA

Which of the following is not included among the four architectures composing enterprise architecture, EA?

  1. Security architecture
  2. Data architecture
  3. Technology architecture
  4. Business architecture
AnswerA. Security architecture

EA is a method that organizes an enterprise through four architectures: business, data, application, and technology. Security is a matter considered across all of the architectures and is not listed as one of EA's four architectures.

Q3 | Data architecture

Among EA's four architectures, which of the following is appropriately handled by the data architecture?

  1. Organizing the purposes and procedures of operations and the division of roles in the organization
  2. Organizing the kinds and meanings of the data the organization handles and the relationships between data
  3. Organizing the composition and functions of the software supporting operations and how it interconnects
  4. Organizing the configuration of infrastructure technology such as servers and networks
AnswerB. Organizing the kinds and meanings of the data the organization handles and the relationships between data

The data architecture organizes the kinds, meanings, and interrelationships of the data an organization handles, represented with E-R diagrams and the like. Business purposes and procedures belong to the business architecture, software composition to the application architecture, and servers and networks to the technology architecture.

Q4 | BPMN

Which of the following appropriately describes BPMN?

  1. A notation that represents the flow of business processes with defined symbols such as start, task, and branch
  2. A dedicated language for defining the names, types, and lengths of data items stored in a database
  3. A schedule chart representing project work dates with horizontal bars
  4. A format for writing down the configuration of network devices
AnswerA. A notation that represents the flow of business processes with defined symbols such as start, task, and branch

BPMN, Business Process Model and Notation, is an international notation that expresses business process flows with standardized symbols, letting all parties share work procedures with the same meaning. Defining data items is data definition, device settings are configuration files, and a bar-style schedule is a Gantt chart; none of these is BPMN.

Q5 | DFD

Which diagram represents the flow of data in business operations, showing where data originates, which processes it passes through, and where it is stored?

  1. DFD
  2. Cause-and-effect diagram
  3. Gantt chart
  4. Pareto chart
AnswerA. DFD

A DFD, a data flow diagram, represents the flow of data with symbols for data flows, processes, data stores, and external entities. A Gantt chart is for schedule management, a cause-and-effect diagram for identifying causes, and a Pareto chart for narrowing down key items; none of them represents the flow of data.

Q6 | BPR

Which initiative redesigns the flow of work itself from the ground up, unconstrained by the existing organization and procedures, aiming for major gains in efficiency and quality?

  1. BPM, business process management
  2. BPR, business process re-engineering
  3. BCP, business continuity plan
  4. BPO, business process outsourcing
AnswerB. BPR, business process re-engineering

BPR is a one-time radical reform that does not assume existing ways of working and redesigns business processes from the ground up to achieve major improvement. BPM is the management activity of continuously improving established processes through PDCA, BPO is entrusting business processes themselves to specialized external companies, and BCP is a plan to keep the business from being interrupted by disasters; none of these terms denotes radical redesign of business processes.

Q7 | BPM

Which of the following is the most appropriate characteristic of BPM, business process management?

  1. Once created, work procedures are in principle never changed and are kept fixed for long periods
  2. Business processes are continuously analyzed and improved, repeating PDCA to raise quality and efficiency
  3. Business processes are completely rebuilt only when top management changes
  4. Work procedures are reviewed only when a system failure occurs
AnswerB. Business processes are continuously analyzed and improved, repeating PDCA to raise quality and efficiency

BPM is a continuous management activity that models business processes and keeps turning the PDCA cycle of execution, monitoring, and improvement. Fixing procedures, or reviewing them only at failures or management changes, is not continuous improvement. A one-time radical rebuild is BPR.

Q8 | Common frame

What is the main purpose of using the common frame, SLCP-JCF?

  1. To set criteria for measuring the attainment level of information security training given to employees
  2. To establish international standards guaranteeing interoperability between network devices made by different manufacturers
  3. To standardize the work activities and terminology from system planning through maintenance, preventing misunderstandings between the ordering side and the contracted side
  4. To set criteria for measuring program execution speed under identical conditions
AnswerC. To standardize the work activities and terminology from system planning through maintenance, preventing misunderstandings between the ordering side and the contracted side

The common frame is a guideline that standardizes the activities, the processes, and terminology across the whole software life cycle so that the acquirer, the ordering side, and the supplier, the contracted side, can do business using the same words. Speed benchmarks, training assessment, and device interoperability standards are none of them purposes of the common frame.

Q9 | SaaS

Which of the following is the most appropriate description of SaaS?

  1. A service that lets you use the functions of finished business software over the Internet, as much as you need
  2. A service that provides an application execution and development environment, where users develop and run their own apps
  3. A service in which the user's purchased servers are installed in the provider's data center
  4. A service that rents out only infrastructure such as servers and storage, with the user installing the OS
AnswerA. A service that lets you use the functions of finished business software over the Internet, as much as you need

SaaS, Software as a Service, is a form in which the functions of finished business software are used over the network. Depositing your own equipment is housing, renting only infrastructure and installing the OS yourself is IaaS, and providing execution and development environments is PaaS; each differs from SaaS.

Q10 | IaaS

Among cloud services, which form has users choose and install the OS themselves and also manage the middleware and applications on top of it?

  1. SaaS
  2. PaaS
  3. IaaS
  4. BPO
AnswerC. IaaS

IaaS provides only the infrastructure, servers, storage, and networking, so everything from the OS up is installed and managed by the user. With SaaS the provider supplies everything up to the application, and with PaaS the provider supplies the OS and execution environment. BPO is outsourcing of business operations themselves, not a cloud delivery model.

Q11 | PaaS

You want to run applications developed in-house on an execution environment prepared by a provider, without installing or managing the OS or database yourselves. Which service form is suitable?

  1. PaaS
  2. IaaS
  3. Housing
  4. SaaS
AnswerA. PaaS

PaaS has the provider supply the OS, database, and execution environment, with the user responsible for the applications and data running on top, so it matches the requirement. With IaaS the user must install and manage the OS, and SaaS is the use of ready-made applications, so in-house apps cannot be run. Housing is renting space to install your own equipment.

Q12 | Responsibility scope

When conducting business using SaaS, which of the following remains the user's management responsibility?

  1. Handling hardware faults and failures of the servers
  2. Obtaining and applying security patches provided for the OS
  3. Managing the data your company has registered and the user accounts and permission settings
  4. Fixing defects in the application programs
AnswerC. Managing the data your company has registered and the user accounts and permission settings

With SaaS, the provider manages the hardware, OS, and applications, but your company's business data, user accounts, and access permission settings remain the user's responsibility. Handling hardware failures, applying OS patches, and fixing the application are all within the provider's scope of responsibility.

Q13 | Housing

Which service installs servers your company purchased in a provider's data center and supplies power, air conditioning, network lines, and entry control?

  1. Hosting
  2. BPO
  3. SaaS
  4. Housing
AnswerD. Housing

Housing is a service in which equipment your company owns is installed in the provider's facility, which supplies the installation environment and its management. Hosting differs in that you rent servers owned by the provider, SaaS is the provision of software functions, and BPO is outsourcing of business operations themselves, so none of those applies.

Q14 | On-premises

Compared with on-premises systems, which of the following is a general characteristic of using cloud services?

  1. Initial investment can be kept low, and resources can be changed in a short time as usage rises and falls
  2. Because the equipment is installed inside your own building, it is unaffected by communication line failures
  3. The equipment must be booked as company assets and depreciated
  4. The hardware configuration can be freely designed to match your company's requirements
AnswerA. Initial investment can be kept low, and resources can be changed in a short time as usage rises and falls

With the cloud you do not purchase equipment, so initial investment stays low, and resource amounts can be scaled up or down quickly as needed. Freely designing the hardware configuration and depreciating assets are characteristics of on-premises systems. Also, since the cloud is used over the network, it is if anything more exposed to line failures.

Q15 | SOA

Which of the following appropriately describes SOA, service-oriented architecture?

  1. The idea of building business functions as independent components, services, and combining them to construct systems
  2. The idea of unifying customer inquiry contact points into one to raise the quality and speed of responses
  3. A document that expresses the quality level of a provided service in figures such as availability and response time and agrees on it with the customer in advance
  4. The idea of consolidating scattered servers into one machine to cut operational effort and cost
AnswerA. The idea of building business functions as independent components, services, and combining them to construct systems

SOA is a design philosophy that componentizes business functions as independent services and composes systems by combining them, allowing flexible response to business changes. Unifying inquiry desks is a customer service matter, consolidating servers is server integration, and a quality agreement document is an SLA; none of these is SOA.

Q16 | Cloud deployment

Highly confidential data is handled in an environment dedicated to your company, while processing whose load swings greatly by season is handled in an environment shared by many unspecified users. Which cloud usage form is this?

  1. Community cloud
  2. Public cloud
  3. Hybrid cloud
  4. Private cloud
AnswerC. Hybrid cloud

A hybrid cloud combines a private cloud, or an in-house environment, with a public cloud, using each according to the nature of the data and the load. Public is shared use only, private is company-dedicated only, and community is sharing among multiple organizations with a common purpose; none of those expresses combined use.

Q17 | BPO

Which of the following cases corresponds to BPO?

  1. A provider's data center was rented as the installation site for servers the company purchased
  2. The in-house user department took charge of the screen design of a business system
  3. Payroll processing, including its operation, was outsourced as a whole to a specialized external company
  4. PCs used in the company were purchased in bulk to lower costs
AnswerC. Payroll processing, including its operation, was outsourced as a whole to a specialized external company

BPO, business process outsourcing, is entrusting a business process itself, operation included, to a specialized external company, and full outsourcing of payroll qualifies. Bulk purchasing of PCs is a procurement measure, using a data center is housing, and in-house screen design is internal development; none of these is outsourcing of operations.

Q18 | Systemization planning

Which of the following is the most appropriate activity performed at the systemization planning stage?

  1. Writing the release procedure for the production environment and verifying the rollback procedure for failures
  2. Training users in how to operate the delivered system
  3. Clarifying the scope of the target operations, the schedule, the organization, the approximate cost, and the expected benefits
  4. Running unit tests of the programs and fixing defects
AnswerC. Clarifying the scope of the target operations, the schedule, the organization, the approximate cost, and the expected benefits

Systemization planning organizes the scope of target operations, timing, promotion structure, approximate costs, investment effects, and risks, assembling the material for the investment decision. Unit testing belongs to development, creating and verifying release procedures to migration and operations, and user training to rollout; none is a planning-stage activity.

Q19 | Requirements definition

When system development is outsourced, who should play the leading role in requirements definition?

  1. The vendor's operations staff
  2. The user departments and executives on the ordering side
  3. The external auditor who audits the system after delivery
  4. The vendor's programmers
AnswerB. The user departments and executives on the ordering side

Requirements definition is the phase that decides what the business wants to realize, so the ordering side's user departments and executives, who know the business, take the lead. The vendor's programmers and operations staff are the side responsible for how to realize it, not the position to decide the requirements themselves. The auditor evaluates from an independent position and cannot decide requirements.

Q20 | Functional requirements

Which of the following corresponds to a functional requirement?

  1. Being able to operate 24 hours a day, 365 days a year, with availability of 99.9% or higher
  2. Being able to enter order data and search and print an order list
  3. Keeping the average screen response time within 1 second
  4. Being able to recover within 4 hours when a failure occurs
AnswerB. Being able to enter order data and search and print an order list

Functional requirements express the functions a system provides, that is, what it can do, so order entry and searching and printing the list qualify. Availability, response time, and recovery time are conditions concerning availability, performance, and operability and maintainability, all non-functional requirements defining qualities other than functions.

Q21 | Non-functional requirements

Which of the following corresponds to a non-functional requirement?

  1. Keeping the screen response time from exceeding 3 seconds even with 500 simultaneous users
  2. Preventing registration of orders exceeding the credit limit set for each customer
  3. Being able to output a monthly sales summary by department
  4. Being able to look up the product name and unit price from the product code
AnswerA. Keeping the screen response time from exceeding 3 seconds even with 500 simultaneous users

Non-functional requirements are quality conditions other than functions, and the performance condition of simultaneous users and response time qualifies. Blocking orders over the credit limit, outputting sales summaries, and product lookup all state processing or functions the system should provide and are classified as functional requirements.

Q22 | RFI

Which of the following appropriately describes an RFI, a request for information?

  1. A guidebook explaining to users how to use the system
  2. A document in which a vendor compiles the implementation approach, development organization, schedule, and cost estimate and submits it to the orderer
  3. A document exchanged after deciding the contractor to finalize the contract amount and delivery date
  4. A document that, ahead of procurement, asks vendors to provide information on feasible technologies, products, approximate costs, and the like
AnswerD. A document that, ahead of procurement, asks vendors to provide information on feasible technologies, products, approximate costs, and the like

An RFI is a request document issued to vendors in the early stage of procurement to gather information about what implementation approaches and products exist. Finalizing amounts and dates is the contract, submitting approach and organization is the vendor's proposal, and explaining usage is the operation manual; none of these is an RFI.

Q23 | RFP

Which of the following is the most appropriate content to include in an RFP, a request for proposal?

  1. The source code of the developed programs and the commenting conventions
  2. The requirements to be realized, preconditions, delivery deadline, and criteria for evaluating proposals
  3. The breakdown of work effort and unit prices estimated by the vendor
  4. Operating procedures for each screen of the delivered system and how to handle errors
AnswerB. The requirements to be realized, preconditions, delivery deadline, and criteria for evaluating proposals

An RFP is the document with which the orderer asks vendors for concrete proposals, presenting the requirements, preconditions, delivery deadline, and the criteria by which proposals will be evaluated. Effort and price breakdowns belong to the vendor's quotation, operating procedures to the user manual, and source code and conventions to development deliverables, not to the contents of an RFP.

Q24 | Procurement order

Which of the following is the appropriate general flow when procuring a system externally?

  1. Contract, then issue the RFI, then issue the RFP, then receive and evaluate proposals and quotations
  2. Issue the RFI, then issue the RFP, then receive and evaluate proposals and quotations, then contract
  3. Receive and evaluate proposals and quotations, then contract, then issue the RFI, then issue the RFP
  4. Issue the RFP, then issue the RFI, then contract, then receive and evaluate proposals and quotations
AnswerB. Issue the RFI, then issue the RFP, then receive and evaluate proposals and quotations, then contract

Procurement proceeds by first gathering information with an RFI, then presenting requirements and evaluation criteria in an RFP to solicit proposals, then evaluating the submitted proposals and quotations to select the contractor, and finally contracting. A flow that contracts or evaluates proposals before gathering information would mean choosing a contractor without any basis for judgment and cannot stand.

Q25 | Green procurement

Which of the following appropriately describes green purchasing?

  1. Preferentially buying from the supplier that can deliver at the lowest price
  2. Avoiding foreign-made goods and buying only domestically produced products
  3. When purchasing products and services, preferentially choosing those with the smallest possible environmental impact
  4. Putting delivery time first and preferentially buying from suppliers holding inventory that can ship immediately upon order
AnswerC. When purchasing products and services, preferentially choosing those with the smallest possible environmental impact

Green purchasing is procurement that considers not only price and quality but also low environmental impact, and national institutions in Japan are required to promote it under the Green Purchasing Act. Lowest-price priority, domestic-only sourcing, and delivery-time priority are all possible procurement policies but do not take environmental consideration as their criterion.

Q26 | SLCP

Which of the following arranges the main processes of the software life cycle in order of execution?

  1. Planning, then requirements definition, then development, then operation, then maintenance
  2. Planning, then development, then requirements definition, then maintenance, then operation
  3. Requirements definition, then planning, then operation, then development, then maintenance
  4. Development, then planning, then requirements definition, then maintenance, then operation
AnswerA. Planning, then requirements definition, then development, then operation, then maintenance

The software life cycle proceeds in the order of planning, which sets direction and investment; requirements definition, which fixes what to realize; development, which builds it; operation, which uses it; and maintenance, which continues improving and fixing it. Flows that put requirements definition or development before planning would start building with the purpose and investment decision unsettled and are inappropriate.

Q27 | DX

Which of the following is the most appropriate description of DX, digital transformation?

  1. Using data and digital technology to transform products, services, business models, operations, and organizations, establishing a competitive advantage
  2. Using virtualization to consolidate multiple servers into one, reducing the operating costs of equipment and floor space
  3. Replacing all the PCs used in the company at once with high-performance latest models
  4. Scanning invoices and application forms kept on paper into electronic files, digitizing only the storage while leaving the way of working unchanged
AnswerA. Using data and digital technology to transform products, services, business models, operations, and organizations, establishing a competitive advantage

DX means using digital technology and data to transform products and services, business models, operations, organizations, and even corporate culture, establishing a competitive advantage. Replacing PCs and reducing servers are equipment refresh and cost cutting, and electronic storage of documents is digitization; none reaches transformation.

Q28 | Digitization

Which of the following initiatives corresponds to digitization?

  1. Contracts kept on paper were scanned and saved as electronic files
  2. Using collected operating data, the business shifted from selling equipment to a billing service based on hours of use
  3. The organization's evaluation system was reformed into one that actively promotes digital talent
  4. Order intake, shipping, and invoicing were connected in one system, digitizing the whole workflow and halving processing time
AnswerA. Contracts kept on paper were scanned and saved as electronic files

Digitization is localized conversion of analog information and individual tasks into digital form, and turning paper contracts into electronic files qualifies. Transforming the business or the organization and its systems is DX, and connecting and digitizing the whole business process is the digitalization stage.

Q29 | Digitalization

Which of the following is the most appropriate description of digitalization?

  1. Keeping existing work procedures as they are and only upgrading the performance of the PCs used for work
  2. Holding operation training for people unfamiliar with digital technology
  3. Connecting the entire business process with digital technology, creating new ways of working and new customer value
  4. Making handwritten slips enterable as electronic data
AnswerC. Connecting the entire business process with digital technology, creating new ways of working and new customer value

Digitalization refers to the stage of connecting not individual tasks but the whole business process digitally, producing new value and new ways of working. Electronic entry of slips is digitization, upgrading PCs is equipment refresh, and operation training is an IT literacy initiative, not process transformation.

Q30 | Big data

Which of the following most appropriately explains the characteristics of big data?

  1. It refers only to tidy numerical data that fits within what spreadsheet software can handle
  2. It refers only to data published by national and local governments that anyone may reuse
  3. It is data whose processing to prevent identification of individuals is prohibited by law and whose handling is restricted
  4. It is data of very large volume, of diverse kinds such as text, images, and location information, generated and updated at high speed
AnswerD. It is data of very large volume, of diverse kinds such as text, images, and location information, generated and updated at high speed

Big data is characterized by volume, variety, and velocity, referring to large-scale and diverse data that conventional methods struggle to handle. Limiting it to tidy spreadsheet data is wrong, and the claim that processing is prohibited is also wrong; in fact use as anonymously processed information is permitted. Publicly reusable data describes open data.

Q31 | Open data

Which of the following appropriately describes open data?

  1. Data aggregating personal information collected without the users' consent
  2. Data encrypted so that it cannot be taken outside
  3. Data protected with finely tuned access permissions so that only certain employees in the company can view it
  4. Data published by national and local governments and the like under conditions and in formats that allow anyone to reuse and redistribute it
AnswerD. Data published by national and local governments and the like under conditions and in formats that allow anyone to reuse and redistribute it

Open data is data published under conditions permitting anyone, commercial or non-commercial, to reuse and redistribute it, in machine-readable formats. Data restricted to internal viewing or encrypted against removal is not published, and aggregating personal information collected without consent violates the Act on the Protection of Personal Information, so it does not qualify.

Q32 | Analysis methods

Which technique analyzes a retailer's enormous sales history and discovers previously unnoticed regularities, such as combinations of products often bought together?

  1. Data migration
  2. Digital divide
  3. Data mining
  4. Data backup
AnswerC. Data mining

Data mining analyzes large volumes of data with statistical and machine learning techniques, digging out hidden regularities and correlations. The digital divide is the gap in IT access, data backup is saving copies, and data migration is moving data; none of these is an analysis technique for discovering regularities.

Q33 | EBPM

Which of the following appropriately describes EBPM?

  1. An analysis method for allocating management resources across businesses
  2. An effort to formulate policy based on evidence such as statistics and performance data and to verify its effects
  3. An index defined by Japan's Ministry of Economy, Trade and Industry so that companies can self-assess the status and maturity of their DX efforts
  4. A management activity of continuously improving business processes
AnswerB. An effort to formulate policy based on evidence such as statistics and performance data and to verify its effects

EBPM, Evidence Based Policy Making, is policy formulation grounded in evidence, building policy on data rather than assumptions or precedent and verifying its effects. The self-assessment index is the DX promotion index, continuous process improvement is BPM, and analysis of resource allocation across businesses is PPM and the like; none of these is EBPM.

Q34 | Digital divide

Which of the following appropriately describes the digital divide?

  1. A mechanism that divides system users into role-based groups and grants only the permissions each needs
  2. A state in which the data handled is too large to store on a single device
  3. A method of storing analysis data split up by department
  4. The gap in information and opportunities that arises between people who can use information and communications technology and people who cannot
AnswerD. The gap in information and opportunities that arises between people who can use information and communications technology and people who cannot

The digital divide is the information gap: the difference in information, opportunity, and income that arises between people and regions that can use IT and those that cannot. Insufficient storage is a technical constraint, role-based permissions are access control, and split storage is distributed management; none of these is a problem of inequality.

Q35 | 2025 cliff

Which of the following is the appropriate content of the 2025 cliff pointed out in the DX Report of Japan's Ministry of Economy, Trade and Industry?

  1. The problem that from 2025 onward, use of overseas cloud services by domestic companies will be restricted by law
  2. The problem that the Act on the Protection of Personal Information will be completely abolished in 2025 and replaced by another system, greatly restricting companies' use of data
  3. The problem that semiconductor integration will hit its physical limit in 2025, making further performance gains impossible
  4. The problem that if complex, black-boxed legacy systems remain unrenewed, large economic losses will arise from 2025 onward
AnswerD. The problem that if complex, black-boxed legacy systems remain unrenewed, large economic losses will arise from 2025 onward

The 2025 cliff is the DX Report's warning that if aging, complex, black-boxed legacy systems cannot be renewed and DX does not progress, large economic losses will arise from 2025 onward. Semiconductor limits are a separate technical topic, and there is no fact of the personal information law being abolished or cloud use being legally restricted.

Practice: answer the questions on this page

This practice tool asks questions in random order (it works when JavaScript is enabled). You can still read all the questions and explanations above without it.

* The explanations are information for study purposes. Exam scope and systems change from year to year, so always check the official announcements of the organization that administers the exam.

This page is a translation of the Japanese original. If the translation and the original differ, the Japanese version takes precedence. View the Japanese original