EXAM QUICK REFERENCE
Turn security vocabulary back into a decision chain: what is protected, what may happen, where the weakness lies, and who should act. Section B applies that chain to longer cases.
Follows IPA Syllabus v4.1 and the current 120-minute, 60-question Sections A/B format.
Question practice is open. These resources are available without signing in.
QUICK REFERENCE
Showing 12 items
役割・データフロー図
Place organizations, systems, roles, data, and external parties on one compact map.
List internal and external actors.
Connect data and actions with arrows.
Mark boundaries, storage locations, and owners.
Draw stated relationships first and do not turn assumptions into facts.
権限・職務分掌表
Organize request, approval, execution, review, and oversight authority by role.
List critical business steps.
Assign a responsible role to each step.
Find excessive access, gaps, and role conflicts.
Check for conflicts when one person performs mutually controlling steps.
システム境界の確認
Separate organizational control, cloud, supplier, and external network boundaries.
Circle resources under direct organizational control.
Mark cloud and supplier responsibilities.
Check data and accounts crossing boundaries.
Being outside a boundary does not remove contractual or oversight duties.
時系列の再構成
Order notifications, logins, changes, detection, and response to assess causality.
Normalize dates, time zones, and formats.
Record each event and responsible actor.
Mark the earliest detection and response points.
Do not invent timestamps the prompt does not provide.
根拠対応表
Map every conclusion to a policy, record, log, or authority stated in the prompt.
Write the condition that must be proven.
Find source evidence for each condition.
Discard option explanations without evidence.
Use general knowledge for context, but ground the answer in the prompt.
条件整理表
Split actor, object, timing, authority, and exceptions into columns for dense passages.
Create a column for each condition type.
Enter prompt facts one by one.
Compare which condition each option changes.
A change to one condition may change the conclusion.
初動の優先順位
Choose the first action from safety, spread, evidence loss, and business interruption.
Check whether impact is still spreading.
Assess whether evidence may be lost.
Choose an authorized action that can be taken now.
A complete fix may not be the first action; address the most urgent current risk.
最小権限の判断
Assess access from business need, scope, duration, and review.
Confirm the task actually needs the access.
Narrow resources, actions, and duration.
Add approval, logging, and periodic review.
Convenience alone does not justify broader privilege.
インシデント初動
Choose the appropriate first move among reporting, isolation, preservation, repair, and recovery.
Identify the reporting route from the plan.
Contain impact within authorized scope.
Preserve records before and after action.
Unauthorized system changes may increase damage or destroy evidence.
リスク対応の選択
Choose avoidance, reduction, transfer, or acceptance from risk, cost, objectives, and legal constraints.
Confirm current risk and acceptance criteria.
Compare effects and side effects of treatments.
Check residual risk after treatment.
Risk transfer does not transfer all accountability.
委託・クラウド対応
Judge controls from responsibility boundaries, contracts, oversight, incident reporting, and exit conditions.
Draw both parties' responsibility boundary.
Check whether the contract covers key requirements.
Verify monitoring, reporting, and exit procedures.
Provider controls do not remove the customer's selection and oversight duties.
法令の適用判断
Assess legal applicability from actor, information category, conduct, purpose, and exceptions.
Identify the actor and information category.
Identify collection, use, disclosure, or other conduct.
Check purpose limits, consent, and exceptions.
Do not choose a rule from a keyword alone; verify every applicability condition.
