PracticeVideosBlogFlashcardsEspañol
All Practice Exams

Free Practice Questions for Systems Auditor Examination

Exam-style questions and explanations by OpenExamPrep.

✓ No registration✓ No credit card
100+ Questions
100% Free

Loading practice questions...

Same family resources

Explore More Japan Information Technology Engineers Examination (IPA)

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.

Applied Information Technology Engineer Examination (応用情報技術者試験, Japan)

Practice Questions

Database Specialist Examination (データベーススペシャリスト試験, Japan)

Practice Questions

Embedded Systems Specialist Examination (エンベデッドシステムスペシャリスト試験, Japan)

Practice Questions

Fundamental Information Technology Engineer Examination (基本情報技術者試験, Japan)

Practice Questions

Information Security Management Examination (情報セキュリティマネジメント試験, Japan)

Practice Questions

Information Technology Passport Examination (ITパスポート試験, Japan)

Practice Questions
Exam Review

Key Facts: Systems Auditor Examination Exam

7,500 JPY

Exam fee (tax included)

IPA スケジュール、手数料など

60/100 + Rank A

A-1/A-2/B-1 cutoff and B-2 essay rank

IPA 試験要綱 Ver.5.6

30 + 25 MCQ

Official A-1 and A-2 item counts

IPA システム監査技術者試験

Level 4

IT Skill Standards (ITSS) ranking

IPA システム監査技術者試験シラバス（レベル4）

Japan's national ITSS Level 4 systems-auditor exam, run by IPA for METI. Fee 7,500 JPY (tax included); Japanese CBT with MCQ, descriptive, and essay papers. This bank is independent English MCQ study, not an official translation.

Sample Systems Auditor Examination Practice Questions

Try these sample questions to review concepts for the Systems Auditor Examination exam. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1In information security, confidentiality, integrity, and availability are commonly grouped as the CIA triad. Which statement correctly describes confidentiality?
A.Information is disclosed only to persons or processes that are authorized to receive it
B.Processing results can be reproduced from the same inputs at a later time
C.Information is complete and has not been altered without authorization
D.Authorized users can obtain information and services when they need them
Explanation: Confidentiality means that information is available only to authorized parties. Integrity concerns unauthorized alteration, availability concerns timely access for authorized users, and reproducibility is a related quality attribute rather than the CIA confidentiality definition used in IPA common knowledge.
2In the OSI reference model, which layer is responsible for logical addressing and routing of packets across interconnected networks?
A.Session layer
B.Data link layer
C.Network layer
D.Transport layer
Explanation: The network layer (Layer 3) provides logical addressing and routing. IP operates at this layer. The data link layer handles framing on a single link, the transport layer provides end-to-end delivery (TCP/UDP), and the session layer manages dialogues between applications.
3Which RAID configuration stores identical copies of data on two disks so that service can continue if one disk fails?
A.RAID 1 (mirroring)
B.RAID 4 (dedicated parity disk)
C.RAID 6 (dual distributed parity)
D.RAID 0 (striping only)
Explanation: RAID 1 mirrors the same data onto two (or more) disks, so a single disk failure does not lose data. RAID 0 stripes without redundancy. RAID 4 and RAID 6 use parity rather than a full duplicate of every block.
4Which combination is multi-factor authentication?
A.A password plus a second, longer password typed on the same screen
B.A fingerprint scan repeated twice on the same reader
C.A password plus a one-time code generated by a hardware token the user holds
D.A user ID plus that same user ID entered again for confirmation
Explanation: Multi-factor authentication combines factors of different kinds: something the user knows, something the user has, or something the user is. A password plus a one-time code from a held token mixes knowledge with possession, so a stolen password alone is not sufficient. Repeating a single factor, however strong, still leaves one factor.
5METI's Systems Management Standards (システム管理基準) describe several development models. Which description matches agile development as stated there?
A.All user-acceptance testing is deferred until after the system has been in production for one year
B.Requirements are frozen first and the system is built in a single sequential pass through design, implementation, and test
C.The system is developed by repeating short development cycles and evolving the product incrementally
D.Hardware microcode is rewritten on a fixed annual calendar regardless of business change
Explanation: The 2023 Systems Management Standards distinguish sequential models (for example waterfall), evolutionary models (for example spiral), and models that develop the system gradually by repeating short development cycles (for example agile). Waterfall is the sequential freeze-then-build pattern. The other two options are not development models in the Standards.
6In database transaction management, which ACID property requires that a transaction either completes all of its updates or has none of them applied?
A.Consistency
B.Isolation
C.Durability
D.Atomicity
Explanation: Atomicity means all-or-nothing application of a transaction's updates. Consistency requires that committed results satisfy integrity rules, isolation requires that concurrent transactions not interfere incorrectly, and durability requires that committed results survive subsequent failures.
7In IT service management, what is a service level agreement (SLA)?
A.An informal hallway understanding that operations staff will try to restore service when convenient
B.A documented agreement on service targets such as availability or response time between the provider and the customer
C.A programming interface specification used only by compiler vendors
D.A hardware spare-parts catalogue maintained solely by the purchasing department
Explanation: An SLA is a documented agreement of service targets and related conditions between the service provider and the customer. IPA common and specialist knowledge treat service-level management as comparing actual performance against those agreed targets. Informal understandings, compiler APIs, and spare-parts catalogues are not SLAs.
8In management-cycle terminology used in IPA common knowledge, what does the 'C' in PDCA stand for?
A.Check
B.Compile
C.Certify
D.Commission
Explanation: PDCA is Plan-Do-Check-Act (sometimes Plan-Do-Check-Action). Check is the evaluation of results against the plan. Commission, compile, and certify are not the standard PDCA steps.
9In earned-value management, planned value (PV) is 1,000 units, earned value (EV) is 800 units, and actual cost (AC) is 700 units. What is the schedule performance index (SPI), and what does it indicate?
A.SPI is 1.25, indicating unused contingency
B.SPI is 0.80, indicating the work is behind the schedule baseline
C.SPI is 1.14, indicating the work is ahead of the schedule baseline
D.SPI is 0.70, indicating a cost overrun
Explanation: SPI = EV / PV = 800 / 1,000 = 0.80. An SPI below 1.00 means less work has been earned than planned, so the project is behind the schedule baseline. Cost performance uses CPI = EV / AC (here 800 / 700 ≈ 1.14), which is a different index.
10In project network analysis, which statement about the critical path is correct?
A.It is the path with the most dummy activities, regardless of duration
B.It is the shortest path from start to finish, and delaying it never affects completion
C.It is the longest path from start to finish; a delay on it delays the project's earliest completion
D.It is any path that includes a milestone, even if that path has spare float
Explanation: The critical path is the longest path through the network and has zero (or the least) total float. Delaying work on it delays the earliest project completion. Shortest-path and dummy-count definitions are incorrect, and mere presence of a milestone does not make a path critical.

About the Systems Auditor Examination Exam

The Systems Auditor Examination (システム監査技術者試験, AU) is Japan's national ITSS Level 4 exam for independent systems auditors. IPA administers it for METI. The 2026 fee is 7,500 JPY (tax included). Candidates sit Japanese CBT: 30 common MCQs, 25 specialist MCQs, two of three descriptive cases, and one essay. A pass requires 60 of 100 on A-1, A-2, and B-1 plus Rank A on B-2. OpenExamPrep publishes 100 independent English multiple-choice study questions on the published syllabus. This bank is not an official translation, not a 2026 CBT item clone, not a CISA substitute, and not a substitute for Japanese essay practice.

Exam sponsor: 独立行政法人情報処理推進機構 (IPA / Innovation Platform Agency, Japan) under the Ministry of Economy, Trade and Industry (METI). The requirements and fees below concern the certification or admission exam, separate from our free practice resources.

Assessment

Japanese CBT in the FY2026 second-half (後期) window. Subject A group and Subject B group are reserved on separate days. Multi-stage scoring applies. Paper sittings are a special measure only.

Time Limit

A-1 50 min; A-2 40 min; B-1 90 min; B-2 120 min, with A group and B group on separate 2026 CBT days.

Passing Score

60 of 100 on A-1, A-2, and B-1, plus Rank A on B-2. IPA may adjust numeric cutoffs if difficulty requires it.

Exam / Certification Fees

7,500 JPY (tax included).

Exam sponsor website

Fees, eligibility, and exam policies can change. Confirm them with the exam sponsor before applying or paying.

Official sources

Our practice resources: topics covered

We aim to reflect publicly available exam outlines and topic information in our study resources. Coverage, format, and difficulty may differ from the actual exam, and we cannot guarantee that every detail is accurate or current. Confirm exam requirements, fees, and policies with the official exam sponsor.

25% of this local practice set

Common IT knowledge (Subject A-1)

Shared advanced-exam knowledge. IPA does not publish AU domain percentages.

25% of this local practice set

Audit standards, ethics, and planning

Independence, ethics, and risk-based planning under Japanese system-audit criteria.

25% of this local practice set

Controls across the system lifecycle

Governance, development, operations, and embedded-system controls.

25% of this local practice set

Evidence, reporting, and follow-up

Procedures, evidence, reports, and follow-up.

Preparing for the Systems Auditor Examination Exam

What You Need to Know

  • Passing score: 60 of 100 on A-1, A-2, and B-1, plus Rank A on B-2. IPA may adjust numeric cutoffs if difficulty requires it.
  • Assessment: Japanese CBT in the FY2026 second-half (後期) window. Subject A group and Subject B group are reserved on separate days. Multi-stage scoring applies. Paper sittings are a special measure only.
  • Time limit: A-1 50 min; A-2 40 min; B-1 90 min; B-2 120 min, with A group and B group on separate 2026 CBT days.
  • Exam / certification fees: 7,500 JPY (tax included). Official sources

Using Our Practice Resources

  • Work through all 100 available questions
  • Review every answer and explanation
  • Track weak areas and revisit them
  • Use our AI tutor for tough concepts

Systems Auditor Examination: Suggested Study Strategy

1Use METI システム監査基準 / システム管理基準 concepts as named in the AU syllabus; do not transplant ISACA domain numbers as if they were IPA law.
2Practice independence, sampling, and report-opinion judgment items.
3Syllabus Ver.6.2 replaces プロバイダ責任制限法 with 情報流通プラットフォーム対処法—do not test the retired name as current law.
4Practice Japanese B-1/B-2 from IPA past papers; this English bank cannot replace essay writing.

Frequently Asked Questions

What is the passing score for the AU examination?

IPA requires at least 60 of 100 on Subjects A-1, A-2, and B-1, and Rank A on essay Subject B-2 (試験要綱 Ver.5.6). Multi-stage selection applies.

Is this the same exam as ISACA CISA?

No. This is Japan's national Systems Auditor Examination administered by IPA. CISA is a separate ISACA credential.

How is the 2026 examination structured?

Japanese CBT in the late window: A-1 30 MCQs/50 min, A-2 25 MCQs/40 min, B-1 3 descriptive/90 min (answer 2), B-2 2 essays/120 min (answer 1). A group and B group are on separate days.

Are these OpenExamPrep practice questions official IPA exam questions?

No. IPA administers the official Japanese examination. This bank is independent English MCQ study on published syllabus topics, not an essay simulation.

Is the exam changing after 2026?

IPA states that the current examination system ends with the FY2026 (令和8年度) administration and that a new examination system is planned from FY2027, following the METI/IPA review of the exam-division structure. FY2026 is also the year every division moved to CBT, and IPA no longer publishes live CBT questions. This practice set is built from the current published syllabus, so confirm IPA's 試験制度の見直し page before planning a sitting beyond FY2026.